--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"info","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51310","PortSpecifier":{"PortValue":51310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51310","PortSpecifier":{"PortValue":51310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915069,"nanos":899932612},"http":{"id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/auth-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a23a37f-3b86-403c-a418-3445a3e1e2c1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42408","PortSpecifier":{"PortValue":42408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42408","PortSpecifier":{"PortValue":42408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915069,"nanos":935367599},"http":{"id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","method":"POST","headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a11aa7/auth-test-model-a11aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a11aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ce0324f-1ce5-4a76-8cc3-ce60fd495508","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51322","PortSpecifier":{"PortValue":51322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51322","PortSpecifier":{"PortValue":51322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915069,"nanos":970835003},"http":{"id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/auth-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:44:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c0764b3-dc10-48a7-a653-14fe1448c05d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:44:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42416","PortSpecifier":{"PortValue":42416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:44:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42416","PortSpecifier":{"PortValue":42416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915070,"nanos":8917285},"http":{"id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","method":"POST","headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:44:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:44:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a11aa7/auth-test-model-a11aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a11aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:44:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:44:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:44:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:44:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2a0949d-fb37-4e1a-9b36-bbe224affc59","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"info","ts":"2026-07-24T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606"} {"level":"info","ts":"2026-07-24T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588"} {"level":"info","ts":"2026-07-24T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"info","ts":"2026-07-24T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"} {"level":"info","ts":"2026-07-24T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f"} {"level":"info","ts":"2026-07-24T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50"} {"level":"info","ts":"2026-07-24T17:44:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"debug","ts":"2026-07-24T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606"} {"level":"debug","ts":"2026-07-24T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606"} {"level":"debug","ts":"2026-07-24T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606"} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50"} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50"} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50"} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50"} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588"} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588"} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50"} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588"} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"} {"level":"info","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f"} {"level":"error","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"error","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:44:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5511039-ba99-4412-a93d-9b0916a3d76d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:50920","PortSpecifier":{"PortValue":50920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5511039-ba99-4412-a93d-9b0916a3d76d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5511039-ba99-4412-a93d-9b0916a3d76d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:50920","PortSpecifier":{"PortValue":50920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915087,"nanos":191599379},"http":{"id":"b5511039-ba99-4412-a93d-9b0916a3d76d","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5511039-ba99-4412-a93d-9b0916a3d76d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5511039-ba99-4412-a93d-9b0916a3d76d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5511039-ba99-4412-a93d-9b0916a3d76d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5511039-ba99-4412-a93d-9b0916a3d76d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5511039-ba99-4412-a93d-9b0916a3d76d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5511039-ba99-4412-a93d-9b0916a3d76d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/auth-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5511039-ba99-4412-a93d-9b0916a3d76d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5511039-ba99-4412-a93d-9b0916a3d76d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5511039-ba99-4412-a93d-9b0916a3d76d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5511039-ba99-4412-a93d-9b0916a3d76d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5511039-ba99-4412-a93d-9b0916a3d76d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56808","PortSpecifier":{"PortValue":56808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56808","PortSpecifier":{"PortValue":56808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915087,"nanos":224866974},"http":{"id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","method":"POST","headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a11aa7/auth-test-model-a11aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a11aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b18917ed-a4a3-46ca-84e5-f233e6cb046a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56816","PortSpecifier":{"PortValue":56816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","method":"GET","path":"/maas-api/v1/api-keys/8af33d86-0163-41a2-a816-360dd7c95a12","host":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56816","PortSpecifier":{"PortValue":56816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915087,"nanos":265848473},"http":{"id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","method":"GET","headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8af33d86-0163-41a2-a816-360dd7c95a12",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8af33d86-0163-41a2-a816-360dd7c95a12",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a11aa7/auth-test-model-a11aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a11aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74029f21-19cd-425b-9dcc-77a8fe89e2d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55b4af07-88e2-4010-890a-4c5f015b1115","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:50924","PortSpecifier":{"PortValue":50924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55b4af07-88e2-4010-890a-4c5f015b1115","method":"GET","path":"/maas-api/v1/api-keys/8af33d86-0163-41a2-a816-360dd7c95a12","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55b4af07-88e2-4010-890a-4c5f015b1115","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:50924","PortSpecifier":{"PortValue":50924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915087,"nanos":299602833},"http":{"id":"55b4af07-88e2-4010-890a-4c5f015b1115","method":"GET","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8af33d86-0163-41a2-a816-360dd7c95a12",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"55b4af07-88e2-4010-890a-4c5f015b1115","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55b4af07-88e2-4010-890a-4c5f015b1115","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55b4af07-88e2-4010-890a-4c5f015b1115","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8af33d86-0163-41a2-a816-360dd7c95a12",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55b4af07-88e2-4010-890a-4c5f015b1115","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55b4af07-88e2-4010-890a-4c5f015b1115","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55b4af07-88e2-4010-890a-4c5f015b1115","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/auth-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"55b4af07-88e2-4010-890a-4c5f015b1115","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55b4af07-88e2-4010-890a-4c5f015b1115","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55b4af07-88e2-4010-890a-4c5f015b1115","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55b4af07-88e2-4010-890a-4c5f015b1115","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55b4af07-88e2-4010-890a-4c5f015b1115","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:44:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606"} {"level":"info","ts":"2026-07-24T17:44:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:44:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:44:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:44:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f"} {"level":"info","ts":"2026-07-24T17:44:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:44:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:44:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588"} {"level":"info","ts":"2026-07-24T17:44:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"info","ts":"2026-07-24T17:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"} {"level":"info","ts":"2026-07-24T17:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"info","ts":"2026-07-24T17:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50"} {"level":"debug","ts":"2026-07-24T17:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606"} {"level":"info","ts":"2026-07-24T17:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606"} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606"} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"error","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"error","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"error","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:45:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"} {"level":"error","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:45:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b487521-39ca-4a7c-8d52-523e6d923d09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57438","PortSpecifier":{"PortValue":57438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b487521-39ca-4a7c-8d52-523e6d923d09","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b487521-39ca-4a7c-8d52-523e6d923d09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57438","PortSpecifier":{"PortValue":57438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915106,"nanos":613929779},"http":{"id":"8b487521-39ca-4a7c-8d52-523e6d923d09","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b487521-39ca-4a7c-8d52-523e6d923d09","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b487521-39ca-4a7c-8d52-523e6d923d09","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b487521-39ca-4a7c-8d52-523e6d923d09","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b487521-39ca-4a7c-8d52-523e6d923d09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b487521-39ca-4a7c-8d52-523e6d923d09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/auth-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b487521-39ca-4a7c-8d52-523e6d923d09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b487521-39ca-4a7c-8d52-523e6d923d09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b487521-39ca-4a7c-8d52-523e6d923d09","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b487521-39ca-4a7c-8d52-523e6d923d09","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b487521-39ca-4a7c-8d52-523e6d923d09","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b487521-39ca-4a7c-8d52-523e6d923d09","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33998","PortSpecifier":{"PortValue":33998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33998","PortSpecifier":{"PortValue":33998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915106,"nanos":657464947},"http":{"id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","method":"POST","headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a11aa7/auth-test-model-a11aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a11aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87804997-c8bb-47a8-b6c9-bbac93d585a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57446","PortSpecifier":{"PortValue":57446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57446","PortSpecifier":{"PortValue":57446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915106,"nanos":694529942},"http":{"id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tEjpVMtu9evCDksl_un9qRsDC9rdt0MXZqgdA9OuRCoPxIqcYKdLwuMwsg38"} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tEjpVMtu9evCDksl_un9qRsDC9rdt0MXZqgdA9OuRCoPxIqcYKdLwuMwsg38\"}"} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00c78ef9-7e8c-482a-a548-52d7cbfb0549","keyName":"e2e-auth-iso-a-58cc61","subscription":"e2e-auth-iso-1d8de7","tenant":"e2e-shared-a-028d4b","userId":"00c78ef9-7e8c-482a-a548-52d7cbfb0549","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/auth-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1d8de7"} {"level":"info","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:45:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f52522fa-7ac7-465e-9a47-f36b44c346cc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/929b155c78f48c6874f347bbe83317d37ec87905f0a05312ad34d955a221ce2f"} {"level":"info","ts":"2026-07-24T17:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/090b6b61b40c0c603a630c21d0b7a5e194e5916722128343328fe4594486aa81"} {"level":"info","ts":"2026-07-24T17:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d05b57371cc299579a1b0e8de1eca8d89262ad6c780902af9430cdb8745b4c50"} {"level":"info","ts":"2026-07-24T17:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"} {"level":"info","ts":"2026-07-24T17:45:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/190d1bdfdc3f5fd47cf69e5908fdb74e8b5a8a51b285592b853541fa9e9a936f"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbe4b1a829dfe72d4bc5ca4edc1e280f695704f1980bd5db55e27b9faa194ca1"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9983fa08bf778225a93ac6f6fee6db6f7635110f15d3b3171a4ec67e02fd232"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee2515664135a2937ebeff416b381a5bf875f0f60b47c4ff8df404172740959b"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5c6a1afe046ef0946b66d3110523a30ede7d2c8d75a3c5efe23f36799499606"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a99399d5f6538095e5f30683ed13ec26233b83595c0303d1b8262235e6d000cb"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/712b24065c87d31a3cd0acf1549d4d278a2749b9c5486fbea068691e8572ecbf"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8c8915a10f57dea70835f36c562a31bbfb000ec767b649bc42ccc30070a9372"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7be23c41ca2ffd07b34cf19c5a6ace0c4996a9da6af54597d56f40c548b49d40"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff7d854b7116c4f6038b51b78e18dedaabff11dfa961484bdb836e4855476178"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9fe0c7fd539e33dfcae99e4eb661f028adc520deb5759f2722611e29d797463"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b0412c26d0bfa8c1d536f7a84d8964551b7ea43811a24a2917b445e4c363f80"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c5c390c3e65667ab9b7213b6cb79eb99a72d61ba11af438c8a0591d929de588"} {"level":"info","ts":"2026-07-24T17:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64"} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"509639a1d507178e7801f6ab047c89c322bc5dd62f08a3fc1c9a04d78b179431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"509639a1d507178e7801f6ab047c89c322bc5dd62f08a3fc1c9a04d78b179431","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"509639a1d507178e7801f6ab047c89c322bc5dd62f08a3fc1c9a04d78b179431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"509639a1d507178e7801f6ab047c89c322bc5dd62f08a3fc1c9a04d78b179431","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/509639a1d507178e7801f6ab047c89c322bc5dd62f08a3fc1c9a04d78b179431"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"509639a1d507178e7801f6ab047c89c322bc5dd62f08a3fc1c9a04d78b179431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["509639a1d507178e7801f6ab047c89c322bc5dd62f08a3fc1c9a04d78b179431"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"509639a1d507178e7801f6ab047c89c322bc5dd62f08a3fc1c9a04d78b179431","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/509639a1d507178e7801f6ab047c89c322bc5dd62f08a3fc1c9a04d78b179431"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"509639a1d507178e7801f6ab047c89c322bc5dd62f08a3fc1c9a04d78b179431","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/509639a1d507178e7801f6ab047c89c322bc5dd62f08a3fc1c9a04d78b179431"} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77a5a380c5d79dde6d94914267cda0a55ac368a072458ddbe49538479e778eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77a5a380c5d79dde6d94914267cda0a55ac368a072458ddbe49538479e778eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77a5a380c5d79dde6d94914267cda0a55ac368a072458ddbe49538479e778eb"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77a5a380c5d79dde6d94914267cda0a55ac368a072458ddbe49538479e778eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d77a5a380c5d79dde6d94914267cda0a55ac368a072458ddbe49538479e778eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77a5a380c5d79dde6d94914267cda0a55ac368a072458ddbe49538479e778eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77a5a380c5d79dde6d94914267cda0a55ac368a072458ddbe49538479e778eb"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d77a5a380c5d79dde6d94914267cda0a55ac368a072458ddbe49538479e778eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77a5a380c5d79dde6d94914267cda0a55ac368a072458ddbe49538479e778eb"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45"} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca"} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"error","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3deb50b015d91705cc48188034c1d65fd0ed1bc0c127e37adf20aae4abd4523","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3deb50b015d91705cc48188034c1d65fd0ed1bc0c127e37adf20aae4abd4523"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3deb50b015d91705cc48188034c1d65fd0ed1bc0c127e37adf20aae4abd4523","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894f7d6438f9c930fb73e57ff9100250d8b09f90f65d9e7596beabf4977bd425"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c70371f99e119ffe612219116e196a19e06b062b00e258ad8a734a0f84c3633e"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3deb50b015d91705cc48188034c1d65fd0ed1bc0c127e37adf20aae4abd4523"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/157fd5346af6cabfea9314a938a317881ee01ced952765fc9735a91a8769d472"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894f7d6438f9c930fb73e57ff9100250d8b09f90f65d9e7596beabf4977bd425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["894f7d6438f9c930fb73e57ff9100250d8b09f90f65d9e7596beabf4977bd425"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe6b21e53271191783214b34dedc4e6418df5444d40128de05a9f0a606283282"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc9bc6399090a26e346d32fc1c3b69293220bbbbbc9014b380f185bfe50b0eb1"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894f7d6438f9c930fb73e57ff9100250d8b09f90f65d9e7596beabf4977bd425","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c70371f99e119ffe612219116e196a19e06b062b00e258ad8a734a0f84c3633e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c70371f99e119ffe612219116e196a19e06b062b00e258ad8a734a0f84c3633e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c70371f99e119ffe612219116e196a19e06b062b00e258ad8a734a0f84c3633e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3deb50b015d91705cc48188034c1d65fd0ed1bc0c127e37adf20aae4abd4523","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3deb50b015d91705cc48188034c1d65fd0ed1bc0c127e37adf20aae4abd4523"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7a252c7e2a4aa5108a3828b4df1a42818648b0109792ac2a53ef20c16566883"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894f7d6438f9c930fb73e57ff9100250d8b09f90f65d9e7596beabf4977bd425"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3deb50b015d91705cc48188034c1d65fd0ed1bc0c127e37adf20aae4abd4523","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"157fd5346af6cabfea9314a938a317881ee01ced952765fc9735a91a8769d472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["157fd5346af6cabfea9314a938a317881ee01ced952765fc9735a91a8769d472"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c12a7fa81f1ddaac6f59eee274e8e4151ef121ad9181fde656f993f50fb8e7fa"} {"level":"info","ts":"2026-07-24T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe6512fc0216817c8b0c505fcb8cd45bd3a5d92c4b625cdc57bc2b4f6eb9ebd"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"157fd5346af6cabfea9314a938a317881ee01ced952765fc9735a91a8769d472","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe6b21e53271191783214b34dedc4e6418df5444d40128de05a9f0a606283282","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe6b21e53271191783214b34dedc4e6418df5444d40128de05a9f0a606283282"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c70371f99e119ffe612219116e196a19e06b062b00e258ad8a734a0f84c3633e"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2d57966bcf14eaf48a164d93f5d2aaaea78c93d5f3d445fab9a319ba8b60988"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe6b21e53271191783214b34dedc4e6418df5444d40128de05a9f0a606283282","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc9bc6399090a26e346d32fc1c3b69293220bbbbbc9014b380f185bfe50b0eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc9bc6399090a26e346d32fc1c3b69293220bbbbbc9014b380f185bfe50b0eb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3deb50b015d91705cc48188034c1d65fd0ed1bc0c127e37adf20aae4abd4523"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/157fd5346af6cabfea9314a938a317881ee01ced952765fc9735a91a8769d472"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc9bc6399090a26e346d32fc1c3b69293220bbbbbc9014b380f185bfe50b0eb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe6b21e53271191783214b34dedc4e6418df5444d40128de05a9f0a606283282"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc9bc6399090a26e346d32fc1c3b69293220bbbbbc9014b380f185bfe50b0eb1"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7a252c7e2a4aa5108a3828b4df1a42818648b0109792ac2a53ef20c16566883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7a252c7e2a4aa5108a3828b4df1a42818648b0109792ac2a53ef20c16566883"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7a252c7e2a4aa5108a3828b4df1a42818648b0109792ac2a53ef20c16566883","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7a252c7e2a4aa5108a3828b4df1a42818648b0109792ac2a53ef20c16566883"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894f7d6438f9c930fb73e57ff9100250d8b09f90f65d9e7596beabf4977bd425","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c12a7fa81f1ddaac6f59eee274e8e4151ef121ad9181fde656f993f50fb8e7fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c12a7fa81f1ddaac6f59eee274e8e4151ef121ad9181fde656f993f50fb8e7fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c12a7fa81f1ddaac6f59eee274e8e4151ef121ad9181fde656f993f50fb8e7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe6512fc0216817c8b0c505fcb8cd45bd3a5d92c4b625cdc57bc2b4f6eb9ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbe6512fc0216817c8b0c505fcb8cd45bd3a5d92c4b625cdc57bc2b4f6eb9ebd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c12a7fa81f1ddaac6f59eee274e8e4151ef121ad9181fde656f993f50fb8e7fa"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe6512fc0216817c8b0c505fcb8cd45bd3a5d92c4b625cdc57bc2b4f6eb9ebd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c70371f99e119ffe612219116e196a19e06b062b00e258ad8a734a0f84c3633e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2d57966bcf14eaf48a164d93f5d2aaaea78c93d5f3d445fab9a319ba8b60988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2d57966bcf14eaf48a164d93f5d2aaaea78c93d5f3d445fab9a319ba8b60988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe6512fc0216817c8b0c505fcb8cd45bd3a5d92c4b625cdc57bc2b4f6eb9ebd"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2d57966bcf14eaf48a164d93f5d2aaaea78c93d5f3d445fab9a319ba8b60988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2d57966bcf14eaf48a164d93f5d2aaaea78c93d5f3d445fab9a319ba8b60988"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3deb50b015d91705cc48188034c1d65fd0ed1bc0c127e37adf20aae4abd4523","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"157fd5346af6cabfea9314a938a317881ee01ced952765fc9735a91a8769d472","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe6b21e53271191783214b34dedc4e6418df5444d40128de05a9f0a606283282","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc9bc6399090a26e346d32fc1c3b69293220bbbbbc9014b380f185bfe50b0eb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7a252c7e2a4aa5108a3828b4df1a42818648b0109792ac2a53ef20c16566883","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c12a7fa81f1ddaac6f59eee274e8e4151ef121ad9181fde656f993f50fb8e7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe6512fc0216817c8b0c505fcb8cd45bd3a5d92c4b625cdc57bc2b4f6eb9ebd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2d57966bcf14eaf48a164d93f5d2aaaea78c93d5f3d445fab9a319ba8b60988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:46:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:46:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:46:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88c41665-59c4-46b6-b195-0a4fa03d5686","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34910","PortSpecifier":{"PortValue":34910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88c41665-59c4-46b6-b195-0a4fa03d5686","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88c41665-59c4-46b6-b195-0a4fa03d5686","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34910","PortSpecifier":{"PortValue":34910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915181,"nanos":108017900},"http":{"id":"88c41665-59c4-46b6-b195-0a4fa03d5686","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88c41665-59c4-46b6-b195-0a4fa03d5686","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88c41665-59c4-46b6-b195-0a4fa03d5686","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88c41665-59c4-46b6-b195-0a4fa03d5686","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88c41665-59c4-46b6-b195-0a4fa03d5686","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88c41665-59c4-46b6-b195-0a4fa03d5686","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88c41665-59c4-46b6-b195-0a4fa03d5686","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/sub-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88c41665-59c4-46b6-b195-0a4fa03d5686","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88c41665-59c4-46b6-b195-0a4fa03d5686","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88c41665-59c4-46b6-b195-0a4fa03d5686","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88c41665-59c4-46b6-b195-0a4fa03d5686","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88c41665-59c4-46b6-b195-0a4fa03d5686","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99f457da-3f4f-490f-8762-42855cc656ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40382","PortSpecifier":{"PortValue":40382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99f457da-3f4f-490f-8762-42855cc656ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99f457da-3f4f-490f-8762-42855cc656ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40382","PortSpecifier":{"PortValue":40382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915181,"nanos":147090273},"http":{"id":"99f457da-3f4f-490f-8762-42855cc656ff","method":"POST","headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99f457da-3f4f-490f-8762-42855cc656ff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99f457da-3f4f-490f-8762-42855cc656ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99f457da-3f4f-490f-8762-42855cc656ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99f457da-3f4f-490f-8762-42855cc656ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99f457da-3f4f-490f-8762-42855cc656ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99f457da-3f4f-490f-8762-42855cc656ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a11aa7/sub-test-model-a11aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a11aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99f457da-3f4f-490f-8762-42855cc656ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99f457da-3f4f-490f-8762-42855cc656ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99f457da-3f4f-490f-8762-42855cc656ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99f457da-3f4f-490f-8762-42855cc656ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99f457da-3f4f-490f-8762-42855cc656ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34918","PortSpecifier":{"PortValue":34918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34918","PortSpecifier":{"PortValue":34918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915181,"nanos":183929109},"http":{"id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","method":"GET","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KhCFk3opgAuq8wo6_KszUeQKo7upRVWaq8jXXKbgj9n1oULcCNiHV8iaMgli"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KhCFk3opgAuq8wo6_KszUeQKo7upRVWaq8jXXKbgj9n1oULcCNiHV8iaMgli\"}"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72420925-610b-4321-b494-67df9d0c91f6","keyName":"e2e-sub-iso-437334","subscription":"e2e-a-only-527d88","tenant":"e2e-shared-a-028d4b","userId":"72420925-610b-4321-b494-67df9d0c91f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/sub-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-527d88"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf9b9ada-6014-4735-ad9f-57c29a3b5cef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40390","PortSpecifier":{"PortValue":40390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96d5f691-c305-4b72-ac26-242adc65ef58","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40390","PortSpecifier":{"PortValue":40390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915181,"nanos":221591624},"http":{"id":"96d5f691-c305-4b72-ac26-242adc65ef58","method":"GET","headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bfueTHsSPMzQgZRV_fERXztZmeBZnbIrtUMmuk9R7EPC7DYgfTNUJOIb95oM"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a11aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bfueTHsSPMzQgZRV_fERXztZmeBZnbIrtUMmuk9R7EPC7DYgfTNUJOIb95oM\"}"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a11aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"edef57d3-c896-4d16-af0c-fef43f5e6b40","keyName":"e2e-sub-iso-a49955","subscription":"e2e-b-only-527d88","tenant":"e2e-shared-b-a11aa7","userId":"edef57d3-c896-4d16-af0c-fef43f5e6b40","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a11aa7/sub-test-model-a11aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a11aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-527d88"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96d5f691-c305-4b72-ac26-242adc65ef58","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:46140","PortSpecifier":{"PortValue":46140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:46140","PortSpecifier":{"PortValue":46140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915195,"nanos":503759367},"http":{"id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/sub-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3efb633-cbfa-40f5-98ca-a36b35867a04","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:38702","PortSpecifier":{"PortValue":38702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:38702","PortSpecifier":{"PortValue":38702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915195,"nanos":541397166},"http":{"id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","method":"POST","headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a11aa7/sub-test-model-a11aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a11aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c06cd52d-b5b8-4971-881a-e30eb4f18886","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:46154","PortSpecifier":{"PortValue":46154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:46154","PortSpecifier":{"PortValue":46154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915195,"nanos":577822940},"http":{"id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tmqVy2D1oYDXZqUk_1NpNuXEzQ7zocroKKRFAiWg3qJptpZBoqdxy3vljGCK"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tmqVy2D1oYDXZqUk_1NpNuXEzQ7zocroKKRFAiWg3qJptpZBoqdxy3vljGCK\"}"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f0c6af32-3466-4bfd-9035-385e386a9c17","keyName":"e2e-sub-iso-7684ab","subscription":"e2e-shared-sub-1e45ad","tenant":"e2e-shared-a-028d4b","userId":"f0c6af32-3466-4bfd-9035-385e386a9c17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/sub-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1e45ad"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fcaac77-7fdb-4ba2-b54c-7e1352484956","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:38706","PortSpecifier":{"PortValue":38706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b756a715-4dca-415d-898f-14d8b74ed2be","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:38706","PortSpecifier":{"PortValue":38706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915195,"nanos":605804342},"http":{"id":"b756a715-4dca-415d-898f-14d8b74ed2be","method":"POST","headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wrchmpAMpm7BiWem_xQxkmyQZ8PjbhuByUPW7DY2P2aVyy2SsRPR1L0F0nWD"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a11aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wrchmpAMpm7BiWem_xQxkmyQZ8PjbhuByUPW7DY2P2aVyy2SsRPR1L0F0nWD\"}"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a11aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8163be0d-f0ce-403a-abfc-4828fde7af41","keyName":"e2e-sub-iso-39d734","subscription":"e2e-shared-sub-1e45ad","tenant":"e2e-shared-b-a11aa7","userId":"8163be0d-f0ce-403a-abfc-4828fde7af41","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a11aa7/sub-test-model-a11aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a11aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1e45ad"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b756a715-4dca-415d-898f-14d8b74ed2be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"} {"level":"info","ts":"2026-07-24T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2d57966bcf14eaf48a164d93f5d2aaaea78c93d5f3d445fab9a319ba8b60988"} {"level":"info","ts":"2026-07-24T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc9bc6399090a26e346d32fc1c3b69293220bbbbbc9014b380f185bfe50b0eb1"} {"level":"info","ts":"2026-07-24T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/509639a1d507178e7801f6ab047c89c322bc5dd62f08a3fc1c9a04d78b179431"} {"level":"info","ts":"2026-07-24T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a0064ac34d0381fa5a90b0b60a9fe3ee8d04f97b80abdb80cea6c052f05fb45"} {"level":"info","ts":"2026-07-24T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d77a5a380c5d79dde6d94914267cda0a55ac368a072458ddbe49538479e778eb"} {"level":"info","ts":"2026-07-24T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"info","ts":"2026-07-24T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7a252c7e2a4aa5108a3828b4df1a42818648b0109792ac2a53ef20c16566883"} {"level":"info","ts":"2026-07-24T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/894f7d6438f9c930fb73e57ff9100250d8b09f90f65d9e7596beabf4977bd425"} {"level":"info","ts":"2026-07-24T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"info","ts":"2026-07-24T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c12a7fa81f1ddaac6f59eee274e8e4151ef121ad9181fde656f993f50fb8e7fa"} {"level":"info","ts":"2026-07-24T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbe6512fc0216817c8b0c505fcb8cd45bd3a5d92c4b625cdc57bc2b4f6eb9ebd"} {"level":"info","ts":"2026-07-24T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fadc928b65c269edf697788cff0879ac08f6c1e7f66bf715e221a2424b2ac64"} {"level":"info","ts":"2026-07-24T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89f8dd239c133e35d7188ac380c4e9ebab9b39410bd042f542efbb351510983a"} {"level":"info","ts":"2026-07-24T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c70371f99e119ffe612219116e196a19e06b062b00e258ad8a734a0f84c3633e"} {"level":"info","ts":"2026-07-24T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/157fd5346af6cabfea9314a938a317881ee01ced952765fc9735a91a8769d472"} {"level":"info","ts":"2026-07-24T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35bb42825ae3ade71de9c7d4d5c9ecd28734bfef141e341dd4d4b8b2226af7ca"} {"level":"info","ts":"2026-07-24T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe6b21e53271191783214b34dedc4e6418df5444d40128de05a9f0a606283282"} {"level":"info","ts":"2026-07-24T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"} {"level":"info","ts":"2026-07-24T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3deb50b015d91705cc48188034c1d65fd0ed1bc0c127e37adf20aae4abd4523"} {"level":"info","ts":"2026-07-24T17:46:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72"} {"level":"debug","ts":"2026-07-24T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc302bdebf89444b29ab4fab24523f4ab90a63eba651f6dcf847590434fc15d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc302bdebf89444b29ab4fab24523f4ab90a63eba651f6dcf847590434fc15d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc302bdebf89444b29ab4fab24523f4ab90a63eba651f6dcf847590434fc15d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc302bdebf89444b29ab4fab24523f4ab90a63eba651f6dcf847590434fc15d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc302bdebf89444b29ab4fab24523f4ab90a63eba651f6dcf847590434fc15d4"} {"level":"debug","ts":"2026-07-24T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc302bdebf89444b29ab4fab24523f4ab90a63eba651f6dcf847590434fc15d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc302bdebf89444b29ab4fab24523f4ab90a63eba651f6dcf847590434fc15d4"} {"level":"debug","ts":"2026-07-24T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc302bdebf89444b29ab4fab24523f4ab90a63eba651f6dcf847590434fc15d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc302bdebf89444b29ab4fab24523f4ab90a63eba651f6dcf847590434fc15d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc302bdebf89444b29ab4fab24523f4ab90a63eba651f6dcf847590434fc15d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc302bdebf89444b29ab4fab24523f4ab90a63eba651f6dcf847590434fc15d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc302bdebf89444b29ab4fab24523f4ab90a63eba651f6dcf847590434fc15d4"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0"} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0"} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"error","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0"} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af"} {"level":"error","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af"} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be"} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be"} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8faad065bc216f61a10c22052b67c0859a7995e1c6674bf8976993d1670747f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af"} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8faad065bc216f61a10c22052b67c0859a7995e1c6674bf8976993d1670747f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8faad065bc216f61a10c22052b67c0859a7995e1c6674bf8976993d1670747f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8faad065bc216f61a10c22052b67c0859a7995e1c6674bf8976993d1670747f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8faad065bc216f61a10c22052b67c0859a7995e1c6674bf8976993d1670747f9"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8faad065bc216f61a10c22052b67c0859a7995e1c6674bf8976993d1670747f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8faad065bc216f61a10c22052b67c0859a7995e1c6674bf8976993d1670747f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8faad065bc216f61a10c22052b67c0859a7995e1c6674bf8976993d1670747f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be"} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8faad065bc216f61a10c22052b67c0859a7995e1c6674bf8976993d1670747f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8faad065bc216f61a10c22052b67c0859a7995e1c6674bf8976993d1670747f9"} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8c710c350235a19035097efa5002e59e170dfeb4881d14ad38e2fc5a394371c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8c710c350235a19035097efa5002e59e170dfeb4881d14ad38e2fc5a394371c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8c710c350235a19035097efa5002e59e170dfeb4881d14ad38e2fc5a394371c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8c710c350235a19035097efa5002e59e170dfeb4881d14ad38e2fc5a394371c"} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8c710c350235a19035097efa5002e59e170dfeb4881d14ad38e2fc5a394371c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8c710c350235a19035097efa5002e59e170dfeb4881d14ad38e2fc5a394371c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8c710c350235a19035097efa5002e59e170dfeb4881d14ad38e2fc5a394371c"} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59c4574fcd06eef87f466b6c072194c1049ee229f017ef74c8b50640c93c74be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59c4574fcd06eef87f466b6c072194c1049ee229f017ef74c8b50640c93c74be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8c710c350235a19035097efa5002e59e170dfeb4881d14ad38e2fc5a394371c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8c710c350235a19035097efa5002e59e170dfeb4881d14ad38e2fc5a394371c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59c4574fcd06eef87f466b6c072194c1049ee229f017ef74c8b50640c93c74be"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8c710c350235a19035097efa5002e59e170dfeb4881d14ad38e2fc5a394371c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59c4574fcd06eef87f466b6c072194c1049ee229f017ef74c8b50640c93c74be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88df2cdccf30ff2ccd1359ad99168a934487a0b65b16f413b8bb06380722d2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59c4574fcd06eef87f466b6c072194c1049ee229f017ef74c8b50640c93c74be"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88df2cdccf30ff2ccd1359ad99168a934487a0b65b16f413b8bb06380722d2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8c710c350235a19035097efa5002e59e170dfeb4881d14ad38e2fc5a394371c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59c4574fcd06eef87f466b6c072194c1049ee229f017ef74c8b50640c93c74be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59c4574fcd06eef87f466b6c072194c1049ee229f017ef74c8b50640c93c74be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59c4574fcd06eef87f466b6c072194c1049ee229f017ef74c8b50640c93c74be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88df2cdccf30ff2ccd1359ad99168a934487a0b65b16f413b8bb06380722d2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88df2cdccf30ff2ccd1359ad99168a934487a0b65b16f413b8bb06380722d2bb"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88df2cdccf30ff2ccd1359ad99168a934487a0b65b16f413b8bb06380722d2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59c4574fcd06eef87f466b6c072194c1049ee229f017ef74c8b50640c93c74be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88df2cdccf30ff2ccd1359ad99168a934487a0b65b16f413b8bb06380722d2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88df2cdccf30ff2ccd1359ad99168a934487a0b65b16f413b8bb06380722d2bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8c710c350235a19035097efa5002e59e170dfeb4881d14ad38e2fc5a394371c"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88df2cdccf30ff2ccd1359ad99168a934487a0b65b16f413b8bb06380722d2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88df2cdccf30ff2ccd1359ad99168a934487a0b65b16f413b8bb06380722d2bb"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88df2cdccf30ff2ccd1359ad99168a934487a0b65b16f413b8bb06380722d2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59c4574fcd06eef87f466b6c072194c1049ee229f017ef74c8b50640c93c74be"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6ab4c4cd4dd2554f0f66e2d696e4ee4190c41661dc9668c347f2b85f88b3a2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6ab4c4cd4dd2554f0f66e2d696e4ee4190c41661dc9668c347f2b85f88b3a2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88df2cdccf30ff2ccd1359ad99168a934487a0b65b16f413b8bb06380722d2bb"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6ab4c4cd4dd2554f0f66e2d696e4ee4190c41661dc9668c347f2b85f88b3a2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a314c633182f67a8566a04cec7b9d1c6ec905bd849a8d5baf79847994ca2f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ab4c4cd4dd2554f0f66e2d696e4ee4190c41661dc9668c347f2b85f88b3a2e"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a314c633182f67a8566a04cec7b9d1c6ec905bd849a8d5baf79847994ca2f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6ab4c4cd4dd2554f0f66e2d696e4ee4190c41661dc9668c347f2b85f88b3a2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6ab4c4cd4dd2554f0f66e2d696e4ee4190c41661dc9668c347f2b85f88b3a2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6ab4c4cd4dd2554f0f66e2d696e4ee4190c41661dc9668c347f2b85f88b3a2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ec80b39dd9d5e182c6f9f88d6a1300991b21e54c956633a6df53a2a03589ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a314c633182f67a8566a04cec7b9d1c6ec905bd849a8d5baf79847994ca2f0c"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ec80b39dd9d5e182c6f9f88d6a1300991b21e54c956633a6df53a2a03589ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a314c633182f67a8566a04cec7b9d1c6ec905bd849a8d5baf79847994ca2f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a314c633182f67a8566a04cec7b9d1c6ec905bd849a8d5baf79847994ca2f0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a314c633182f67a8566a04cec7b9d1c6ec905bd849a8d5baf79847994ca2f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6ab4c4cd4dd2554f0f66e2d696e4ee4190c41661dc9668c347f2b85f88b3a2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ec80b39dd9d5e182c6f9f88d6a1300991b21e54c956633a6df53a2a03589ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ec80b39dd9d5e182c6f9f88d6a1300991b21e54c956633a6df53a2a03589ec"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ec80b39dd9d5e182c6f9f88d6a1300991b21e54c956633a6df53a2a03589ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a314c633182f67a8566a04cec7b9d1c6ec905bd849a8d5baf79847994ca2f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4777661de84534110223cd97ac33d86f82f8f0ca25991e22550cf23713d8b68e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4777661de84534110223cd97ac33d86f82f8f0ca25991e22550cf23713d8b68e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ab4c4cd4dd2554f0f66e2d696e4ee4190c41661dc9668c347f2b85f88b3a2e"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a314c633182f67a8566a04cec7b9d1c6ec905bd849a8d5baf79847994ca2f0c"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4777661de84534110223cd97ac33d86f82f8f0ca25991e22550cf23713d8b68e"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ec80b39dd9d5e182c6f9f88d6a1300991b21e54c956633a6df53a2a03589ec"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94811494a7346df95b397b9304b3344c6261e2a51b5f27f63c41595517125d30"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ec80b39dd9d5e182c6f9f88d6a1300991b21e54c956633a6df53a2a03589ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ec80b39dd9d5e182c6f9f88d6a1300991b21e54c956633a6df53a2a03589ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbaa6273475646c51883b948446fb5b4cefc89c87e89632b0c81bdc6d3217dfc"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ec80b39dd9d5e182c6f9f88d6a1300991b21e54c956633a6df53a2a03589ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94811494a7346df95b397b9304b3344c6261e2a51b5f27f63c41595517125d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94811494a7346df95b397b9304b3344c6261e2a51b5f27f63c41595517125d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db1ee3b2b6c71bd618b1b54f69e3504b92c4665b9bf6130a5e77024a58eedd7"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db040c01e29778a9a01c0080cab071ae0a9841a55a91d9a0ae32ca14a4167736"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94811494a7346df95b397b9304b3344c6261e2a51b5f27f63c41595517125d30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4777661de84534110223cd97ac33d86f82f8f0ca25991e22550cf23713d8b68e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4777661de84534110223cd97ac33d86f82f8f0ca25991e22550cf23713d8b68e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ec80b39dd9d5e182c6f9f88d6a1300991b21e54c956633a6df53a2a03589ec"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4777661de84534110223cd97ac33d86f82f8f0ca25991e22550cf23713d8b68e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbaa6273475646c51883b948446fb5b4cefc89c87e89632b0c81bdc6d3217dfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbaa6273475646c51883b948446fb5b4cefc89c87e89632b0c81bdc6d3217dfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94811494a7346df95b397b9304b3344c6261e2a51b5f27f63c41595517125d30"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4777661de84534110223cd97ac33d86f82f8f0ca25991e22550cf23713d8b68e"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbaa6273475646c51883b948446fb5b4cefc89c87e89632b0c81bdc6d3217dfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5db1ee3b2b6c71bd618b1b54f69e3504b92c4665b9bf6130a5e77024a58eedd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5db1ee3b2b6c71bd618b1b54f69e3504b92c4665b9bf6130a5e77024a58eedd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbaa6273475646c51883b948446fb5b4cefc89c87e89632b0c81bdc6d3217dfc"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5db1ee3b2b6c71bd618b1b54f69e3504b92c4665b9bf6130a5e77024a58eedd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db1ee3b2b6c71bd618b1b54f69e3504b92c4665b9bf6130a5e77024a58eedd7"} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db040c01e29778a9a01c0080cab071ae0a9841a55a91d9a0ae32ca14a4167736","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db040c01e29778a9a01c0080cab071ae0a9841a55a91d9a0ae32ca14a4167736"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db040c01e29778a9a01c0080cab071ae0a9841a55a91d9a0ae32ca14a4167736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db040c01e29778a9a01c0080cab071ae0a9841a55a91d9a0ae32ca14a4167736"} {"level":"info","ts":"2026-07-24T17:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ec80b39dd9d5e182c6f9f88d6a1300991b21e54c956633a6df53a2a03589ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94811494a7346df95b397b9304b3344c6261e2a51b5f27f63c41595517125d30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4777661de84534110223cd97ac33d86f82f8f0ca25991e22550cf23713d8b68e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbaa6273475646c51883b948446fb5b4cefc89c87e89632b0c81bdc6d3217dfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db1ee3b2b6c71bd618b1b54f69e3504b92c4665b9bf6130a5e77024a58eedd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db040c01e29778a9a01c0080cab071ae0a9841a55a91d9a0ae32ca14a4167736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"} {"level":"info","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97a30539-42ff-43dd-bd16-88f65efa6246","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33022","PortSpecifier":{"PortValue":33022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97a30539-42ff-43dd-bd16-88f65efa6246","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97a30539-42ff-43dd-bd16-88f65efa6246","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33022","PortSpecifier":{"PortValue":33022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915259,"nanos":348183061},"http":{"id":"97a30539-42ff-43dd-bd16-88f65efa6246","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"97a30539-42ff-43dd-bd16-88f65efa6246","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97a30539-42ff-43dd-bd16-88f65efa6246","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97a30539-42ff-43dd-bd16-88f65efa6246","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a30539-42ff-43dd-bd16-88f65efa6246","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a30539-42ff-43dd-bd16-88f65efa6246","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a30539-42ff-43dd-bd16-88f65efa6246","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97a30539-42ff-43dd-bd16-88f65efa6246","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a30539-42ff-43dd-bd16-88f65efa6246","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a30539-42ff-43dd-bd16-88f65efa6246","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97a30539-42ff-43dd-bd16-88f65efa6246","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97a30539-42ff-43dd-bd16-88f65efa6246","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:53346","PortSpecifier":{"PortValue":53346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:53346","PortSpecifier":{"PortValue":53346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915259,"nanos":395194085},"http":{"id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","method":"POST","headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a11aa7/rate-test-model-a11aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a11aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74036d45-f077-44ff-ab2f-2aa46cac18e0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4843909c-8586-4929-9eec-e761145ceb30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33032","PortSpecifier":{"PortValue":33032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4843909c-8586-4929-9eec-e761145ceb30","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4843909c-8586-4929-9eec-e761145ceb30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33032","PortSpecifier":{"PortValue":33032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915259,"nanos":433797355},"http":{"id":"4843909c-8586-4929-9eec-e761145ceb30","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4843909c-8586-4929-9eec-e761145ceb30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6bvyPgqC2yyHEzGM_az9nj4ZRwV279kX9EhzxxOzzuhI5GtA2FL8r5nOwyXR"} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4843909c-8586-4929-9eec-e761145ceb30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6bvyPgqC2yyHEzGM_az9nj4ZRwV279kX9EhzxxOzzuhI5GtA2FL8r5nOwyXR\"}"} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4843909c-8586-4929-9eec-e761145ceb30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7555a18e-3cf0-4313-be65-543a0f03836d","keyName":"e2e-rate-a-d3a4c8","subscription":"e2e-rate-iso-a-d3a4c8","tenant":"e2e-shared-a-028d4b","userId":"7555a18e-3cf0-4313-be65-543a0f03836d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4843909c-8586-4929-9eec-e761145ceb30","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-d3a4c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4843909c-8586-4929-9eec-e761145ceb30","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3a4c8","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4843909c-8586-4929-9eec-e761145ceb30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4843909c-8586-4929-9eec-e761145ceb30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4843909c-8586-4929-9eec-e761145ceb30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4843909c-8586-4929-9eec-e761145ceb30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4843909c-8586-4929-9eec-e761145ceb30","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4843909c-8586-4929-9eec-e761145ceb30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4843909c-8586-4929-9eec-e761145ceb30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3a4c8"} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4843909c-8586-4929-9eec-e761145ceb30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4843909c-8586-4929-9eec-e761145ceb30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7555a18e-3cf0-4313-be65-543a0f03836d","keyName":"e2e-rate-a-d3a4c8","selected_subscription":"e2e-rate-iso-a-d3a4c8","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-d3a4c8@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3a4c8","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4843909c-8586-4929-9eec-e761145ceb30","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4843909c-8586-4929-9eec-e761145ceb30","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33044","PortSpecifier":{"PortValue":33044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33044","PortSpecifier":{"PortValue":33044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915260,"nanos":521085918},"http":{"id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6bvyPgqC2yyHEzGM_az9nj4ZRwV279kX9EhzxxOzzuhI5GtA2FL8r5nOwyXR"} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6bvyPgqC2yyHEzGM_az9nj4ZRwV279kX9EhzxxOzzuhI5GtA2FL8r5nOwyXR\"}"} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7555a18e-3cf0-4313-be65-543a0f03836d","keyName":"e2e-rate-a-d3a4c8","subscription":"e2e-rate-iso-a-d3a4c8","tenant":"e2e-shared-a-028d4b","userId":"7555a18e-3cf0-4313-be65-543a0f03836d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-d3a4c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3a4c8","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3a4c8"} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7555a18e-3cf0-4313-be65-543a0f03836d","keyName":"e2e-rate-a-d3a4c8","selected_subscription":"e2e-rate-iso-a-d3a4c8","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-d3a4c8@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3a4c8","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d36b394a-da93-4b74-bf75-a52b1fbb4cb9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41236","PortSpecifier":{"PortValue":41236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41236","PortSpecifier":{"PortValue":41236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915261,"nanos":569173702},"http":{"id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6bvyPgqC2yyHEzGM_az9nj4ZRwV279kX9EhzxxOzzuhI5GtA2FL8r5nOwyXR"} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6bvyPgqC2yyHEzGM_az9nj4ZRwV279kX9EhzxxOzzuhI5GtA2FL8r5nOwyXR\"}"} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7555a18e-3cf0-4313-be65-543a0f03836d","keyName":"e2e-rate-a-d3a4c8","subscription":"e2e-rate-iso-a-d3a4c8","tenant":"e2e-shared-a-028d4b","userId":"7555a18e-3cf0-4313-be65-543a0f03836d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-d3a4c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3a4c8","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3a4c8"} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7555a18e-3cf0-4313-be65-543a0f03836d","keyName":"e2e-rate-a-d3a4c8","selected_subscription":"e2e-rate-iso-a-d3a4c8","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-d3a4c8@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3a4c8","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17c73be7-8a9b-4f48-9525-1b3ad20838c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01321b41-e276-4c5f-975a-be0dff248e9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41250","PortSpecifier":{"PortValue":41250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01321b41-e276-4c5f-975a-be0dff248e9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01321b41-e276-4c5f-975a-be0dff248e9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41250","PortSpecifier":{"PortValue":41250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915270,"nanos":248462899},"http":{"id":"01321b41-e276-4c5f-975a-be0dff248e9e","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01321b41-e276-4c5f-975a-be0dff248e9e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01321b41-e276-4c5f-975a-be0dff248e9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01321b41-e276-4c5f-975a-be0dff248e9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01321b41-e276-4c5f-975a-be0dff248e9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01321b41-e276-4c5f-975a-be0dff248e9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01321b41-e276-4c5f-975a-be0dff248e9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01321b41-e276-4c5f-975a-be0dff248e9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01321b41-e276-4c5f-975a-be0dff248e9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01321b41-e276-4c5f-975a-be0dff248e9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01321b41-e276-4c5f-975a-be0dff248e9e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01321b41-e276-4c5f-975a-be0dff248e9e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56158","PortSpecifier":{"PortValue":56158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56158","PortSpecifier":{"PortValue":56158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915270,"nanos":288461120},"http":{"id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","method":"POST","headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a11aa7/rate-test-model-a11aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a11aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"651aeaaf-eb2c-43b4-8b4e-3960c99e2693","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41266","PortSpecifier":{"PortValue":41266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41266","PortSpecifier":{"PortValue":41266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915270,"nanos":328461037},"http":{"id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe"} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe\"}"} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","subscription":"e2e-rate-iso-a-e71a30","tenant":"e2e-shared-a-028d4b","userId":"6ad76d61-9cce-45d2-a320-beef8737367e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-e71a30\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e71a30"} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","selected_subscription":"e2e-rate-iso-a-e71a30","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-e71a30@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9a1d3a8-9f48-4540-b4fa-b6bf51996f4e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42566","PortSpecifier":{"PortValue":42566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42566","PortSpecifier":{"PortValue":42566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915271,"nanos":366540634},"http":{"id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe"} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe\"}"} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","subscription":"e2e-rate-iso-a-e71a30","tenant":"e2e-shared-a-028d4b","userId":"6ad76d61-9cce-45d2-a320-beef8737367e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-e71a30\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e71a30"} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","selected_subscription":"e2e-rate-iso-a-e71a30","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-e71a30@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a96e6c6-ecf1-4d87-a254-93b3fa6d3365","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42568","PortSpecifier":{"PortValue":42568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42568","PortSpecifier":{"PortValue":42568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915272,"nanos":408567424},"http":{"id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe"} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe\"}"} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","subscription":"e2e-rate-iso-a-e71a30","tenant":"e2e-shared-a-028d4b","userId":"6ad76d61-9cce-45d2-a320-beef8737367e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-e71a30\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e71a30"} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","selected_subscription":"e2e-rate-iso-a-e71a30","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-e71a30@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2c28609-c6e9-432b-bdf9-f95d8d266ba5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42580","PortSpecifier":{"PortValue":42580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"197c927c-0481-42d6-b31a-0f072ee43e6c","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42580","PortSpecifier":{"PortValue":42580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915273,"nanos":446227455},"http":{"id":"197c927c-0481-42d6-b31a-0f072ee43e6c","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe"} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe\"}"} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","subscription":"e2e-rate-iso-a-e71a30","tenant":"e2e-shared-a-028d4b","userId":"6ad76d61-9cce-45d2-a320-beef8737367e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-e71a30\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e71a30"} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","selected_subscription":"e2e-rate-iso-a-e71a30","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-e71a30@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"197c927c-0481-42d6-b31a-0f072ee43e6c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42588","PortSpecifier":{"PortValue":42588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42588","PortSpecifier":{"PortValue":42588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915274,"nanos":487287215},"http":{"id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe"} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe\"}"} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","subscription":"e2e-rate-iso-a-e71a30","tenant":"e2e-shared-a-028d4b","userId":"6ad76d61-9cce-45d2-a320-beef8737367e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-e71a30\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e71a30"} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","selected_subscription":"e2e-rate-iso-a-e71a30","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-e71a30@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd65299b-77a9-4374-b7f6-6d7132e02c67","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42590","PortSpecifier":{"PortValue":42590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42590","PortSpecifier":{"PortValue":42590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915275,"nanos":524148429},"http":{"id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe"} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe\"}"} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","subscription":"e2e-rate-iso-a-e71a30","tenant":"e2e-shared-a-028d4b","userId":"6ad76d61-9cce-45d2-a320-beef8737367e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-e71a30\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e71a30"} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","selected_subscription":"e2e-rate-iso-a-e71a30","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-e71a30@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cef5c0e4-17bb-4ca7-8fa6-8c0222bcce4a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42594","PortSpecifier":{"PortValue":42594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42594","PortSpecifier":{"PortValue":42594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915276,"nanos":563053395},"http":{"id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe"} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe\"}"} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","subscription":"e2e-rate-iso-a-e71a30","tenant":"e2e-shared-a-028d4b","userId":"6ad76d61-9cce-45d2-a320-beef8737367e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-e71a30\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e71a30"} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","selected_subscription":"e2e-rate-iso-a-e71a30","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-e71a30@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f3e5811-1a02-4d58-a4dd-d84ba771b36c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42596","PortSpecifier":{"PortValue":42596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7901ac3b-78d7-48e5-b948-890386abea1c","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42596","PortSpecifier":{"PortValue":42596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915277,"nanos":602291083},"http":{"id":"7901ac3b-78d7-48e5-b948-890386abea1c","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe"} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe\"}"} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","subscription":"e2e-rate-iso-a-e71a30","tenant":"e2e-shared-a-028d4b","userId":"6ad76d61-9cce-45d2-a320-beef8737367e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-e71a30\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e71a30"} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","selected_subscription":"e2e-rate-iso-a-e71a30","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-e71a30@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7901ac3b-78d7-48e5-b948-890386abea1c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42600","PortSpecifier":{"PortValue":42600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6292aaee-9759-4b58-91c1-29d80585ddbb","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42600","PortSpecifier":{"PortValue":42600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915278,"nanos":639660841},"http":{"id":"6292aaee-9759-4b58-91c1-29d80585ddbb","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe"} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe\"}"} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","subscription":"e2e-rate-iso-a-e71a30","tenant":"e2e-shared-a-028d4b","userId":"6ad76d61-9cce-45d2-a320-beef8737367e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-e71a30\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e71a30"} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","selected_subscription":"e2e-rate-iso-a-e71a30","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-e71a30@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6292aaee-9759-4b58-91c1-29d80585ddbb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42614","PortSpecifier":{"PortValue":42614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42614","PortSpecifier":{"PortValue":42614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915279,"nanos":677672213},"http":{"id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe"} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe\"}"} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","subscription":"e2e-rate-iso-a-e71a30","tenant":"e2e-shared-a-028d4b","userId":"6ad76d61-9cce-45d2-a320-beef8737367e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-e71a30\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e71a30"} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","selected_subscription":"e2e-rate-iso-a-e71a30","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-e71a30@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:47:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beac10fd-2321-4a4a-aa0e-6a96c83767be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42624","PortSpecifier":{"PortValue":42624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c889e0c4-c7b7-4054-9649-1c3479f21923","method":"POST","path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions","host":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:42624","PortSpecifier":{"PortValue":42624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915280,"nanos":715594996},"http":{"id":"c889e0c4-c7b7-4054-9649-1c3479f21923","method":"POST","headers":{":authority":"e2e-shared-a-028d4b.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe"} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PhJK4G2ludeAbGbY_mAkz7iyWJp0equw0U6scxfCoa9r0pcfLyrFTVMCqZEe\"}"} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","subscription":"e2e-rate-iso-a-e71a30","tenant":"e2e-shared-a-028d4b","userId":"6ad76d61-9cce-45d2-a320-beef8737367e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\",\"requestedSubscription\":\"e2e-rate-iso-a-e71a30\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-028d4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-028d4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e71a30"} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ad76d61-9cce-45d2-a320-beef8737367e","keyName":"e2e-rate-a-e71a30","selected_subscription":"e2e-rate-iso-a-e71a30","selected_subscription_key":"ai-tenant-e2e-shared-a-028d4b/e2e-rate-iso-a-e71a30@ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-028d4b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e71a30","namespace":"ai-tenant-e2e-shared-a-028d4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-028d4b/rate-test-model-028d4b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c889e0c4-c7b7-4054-9649-1c3479f21923","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47613942-6128-47b1-9827-354efe27104e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33242","PortSpecifier":{"PortValue":33242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47613942-6128-47b1-9827-354efe27104e","method":"POST","path":"/ai-tenant-e2e-shared-b-a11aa7/rate-test-model-a11aa7/v1/completions","host":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47613942-6128-47b1-9827-354efe27104e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33242","PortSpecifier":{"PortValue":33242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915280,"nanos":753591019},"http":{"id":"47613942-6128-47b1-9827-354efe27104e","method":"POST","headers":{":authority":"e2e-shared-b-a11aa7.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a11aa7/rate-test-model-a11aa7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47613942-6128-47b1-9827-354efe27104e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TQzpMgPO7bQGflbl_mr8CxaU5A3KhZ2R0yUbPLX4YuFonRvfP0Rb8ObSnVdd"} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47613942-6128-47b1-9827-354efe27104e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a11aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TQzpMgPO7bQGflbl_mr8CxaU5A3KhZ2R0yUbPLX4YuFonRvfP0Rb8ObSnVdd\"}"} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47613942-6128-47b1-9827-354efe27104e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a11aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"874574a7-63ee-4420-abf4-a0fd0f129319","keyName":"e2e-rate-b-e71a30","subscription":"e2e-rate-iso-b-e71a30","tenant":"e2e-shared-b-a11aa7","userId":"874574a7-63ee-4420-abf4-a0fd0f129319","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47613942-6128-47b1-9827-354efe27104e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a11aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a11aa7/rate-test-model-a11aa7\",\"requestedSubscription\":\"e2e-rate-iso-b-e71a30\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47613942-6128-47b1-9827-354efe27104e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a11aa7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a11aa7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e71a30","namespace":"ai-tenant-e2e-shared-b-a11aa7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-a11aa7/rate-test-model-a11aa7"}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47613942-6128-47b1-9827-354efe27104e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47613942-6128-47b1-9827-354efe27104e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47613942-6128-47b1-9827-354efe27104e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47613942-6128-47b1-9827-354efe27104e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47613942-6128-47b1-9827-354efe27104e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a11aa7/rate-test-model-a11aa7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a11aa7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47613942-6128-47b1-9827-354efe27104e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"874574a7-63ee-4420-abf4-a0fd0f129319","keyName":"e2e-rate-b-e71a30","selected_subscription":"e2e-rate-iso-b-e71a30","selected_subscription_key":"ai-tenant-e2e-shared-b-a11aa7/e2e-rate-iso-b-e71a30@ai-tenant-e2e-shared-b-a11aa7/rate-test-model-a11aa7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a11aa7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e71a30","namespace":"ai-tenant-e2e-shared-b-a11aa7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-a11aa7/rate-test-model-a11aa7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47613942-6128-47b1-9827-354efe27104e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e71a30"} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47613942-6128-47b1-9827-354efe27104e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47613942-6128-47b1-9827-354efe27104e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47613942-6128-47b1-9827-354efe27104e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:48:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47613942-6128-47b1-9827-354efe27104e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a314c633182f67a8566a04cec7b9d1c6ec905bd849a8d5baf79847994ca2f0c"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbaa6273475646c51883b948446fb5b4cefc89c87e89632b0c81bdc6d3217dfc"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/609709bbc51e384e4006d562b983334c97224b9ca5dabfb9839386dc0e618129"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/243088e2f9dd8ae9281ee4b5adf71d31e21e9e6ee47e04bb3966c4e8582c10af"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80ec80b39dd9d5e182c6f9f88d6a1300991b21e54c956633a6df53a2a03589ec"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8c710c350235a19035097efa5002e59e170dfeb4881d14ad38e2fc5a394371c"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71abcf06a467b4ef70bf2e008f390906096ce19c624a7714d80dad9320213152"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5db1ee3b2b6c71bd618b1b54f69e3504b92c4665b9bf6130a5e77024a58eedd7"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db040c01e29778a9a01c0080cab071ae0a9841a55a91d9a0ae32ca14a4167736"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71a1bcc5ec9bccf2efb19a4fc4efef5ab873da06793e5306dcbb5dd7fbd8c7db"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c05cc471216b13c46de47d2509727e79711241e54091addb24cbe1838d3d4be"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6ab4c4cd4dd2554f0f66e2d696e4ee4190c41661dc9668c347f2b85f88b3a2e"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa6713df73ea72f662eb42447abf97792949eb1a721146ad9900af7f0a30bf72"} {"level":"info","ts":"2026-07-24T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/005c932647d4602e735ef5ba071492b37c0f923b6f67123a8264c364a5f920bb"} {"level":"info","ts":"2026-07-24T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc302bdebf89444b29ab4fab24523f4ab90a63eba651f6dcf847590434fc15d4"} {"level":"info","ts":"2026-07-24T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/391d4e7aad146998edb0a21b1a05b1519fe3fb5dc926563d3c48d3fad0d4f9f0"} {"level":"info","ts":"2026-07-24T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88df2cdccf30ff2ccd1359ad99168a934487a0b65b16f413b8bb06380722d2bb"} {"level":"info","ts":"2026-07-24T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94811494a7346df95b397b9304b3344c6261e2a51b5f27f63c41595517125d30"} {"level":"info","ts":"2026-07-24T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/823c67189a85c8bd3f0aa09fdd158a6440a92b1b9aa849461b3ae8b7d2ce7aee"} {"level":"info","ts":"2026-07-24T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47f05171c359eec25f80e35f5233ae194e13fe4525bdc6118acc51e7b671e645"} {"level":"info","ts":"2026-07-24T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4777661de84534110223cd97ac33d86f82f8f0ca25991e22550cf23713d8b68e"} {"level":"info","ts":"2026-07-24T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59c4574fcd06eef87f466b6c072194c1049ee229f017ef74c8b50640c93c74be"} {"level":"info","ts":"2026-07-24T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8faad065bc216f61a10c22052b67c0859a7995e1c6674bf8976993d1670747f9"} {"level":"info","ts":"2026-07-24T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/127b5ebbd6ed434866a1a2eccb9a08a82ce7315025ee59bad35cdbe3dc559ac0"} {"level":"info","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae564f7e-8263-463a-a093-d10eaadcb541","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:55230","PortSpecifier":{"PortValue":55230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae564f7e-8263-463a-a093-d10eaadcb541","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae564f7e-8263-463a-a093-d10eaadcb541","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:55230","PortSpecifier":{"PortValue":55230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915344,"nanos":608203126},"http":{"id":"ae564f7e-8263-463a-a093-d10eaadcb541","method":"POST","headers":{":authority":"maas.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae564f7e-8263-463a-a093-d10eaadcb541","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae564f7e-8263-463a-a093-d10eaadcb541","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae564f7e-8263-463a-a093-d10eaadcb541","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae564f7e-8263-463a-a093-d10eaadcb541","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae564f7e-8263-463a-a093-d10eaadcb541","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae564f7e-8263-463a-a093-d10eaadcb541","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae564f7e-8263-463a-a093-d10eaadcb541","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae564f7e-8263-463a-a093-d10eaadcb541","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae564f7e-8263-463a-a093-d10eaadcb541","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae564f7e-8263-463a-a093-d10eaadcb541","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae564f7e-8263-463a-a093-d10eaadcb541","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:55234","PortSpecifier":{"PortValue":55234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:55234","PortSpecifier":{"PortValue":55234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915344,"nanos":655144166},"http":{"id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","method":"POST","headers":{":authority":"maas.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZOEFMZDUKBXxaJcD_ZRau3KslcAVOIPgNUCodmM1mrn6IM2iZNeV5YMZBVR9"} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZOEFMZDUKBXxaJcD_ZRau3KslcAVOIPgNUCodmM1mrn6IM2iZNeV5YMZBVR9\"}"} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"924f9d6d-40a9-467a-a41e-c7cd5e0c15b3","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"924f9d6d-40a9-467a-a41e-c7cd5e0c15b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"924f9d6d-40a9-467a-a41e-c7cd5e0c15b3","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c741e7d3-8d83-486d-bcac-1aeaf9aa3aeb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde"} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde"} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde"} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2"} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2"} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357767149a7c094a393d76c918981bfcb1ce8c8bcac2e8fa76915a3a4cffc5e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357767149a7c094a393d76c918981bfcb1ce8c8bcac2e8fa76915a3a4cffc5e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357767149a7c094a393d76c918981bfcb1ce8c8bcac2e8fa76915a3a4cffc5e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357767149a7c094a393d76c918981bfcb1ce8c8bcac2e8fa76915a3a4cffc5e2"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357767149a7c094a393d76c918981bfcb1ce8c8bcac2e8fa76915a3a4cffc5e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357767149a7c094a393d76c918981bfcb1ce8c8bcac2e8fa76915a3a4cffc5e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["357767149a7c094a393d76c918981bfcb1ce8c8bcac2e8fa76915a3a4cffc5e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357767149a7c094a393d76c918981bfcb1ce8c8bcac2e8fa76915a3a4cffc5e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357767149a7c094a393d76c918981bfcb1ce8c8bcac2e8fa76915a3a4cffc5e2"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357767149a7c094a393d76c918981bfcb1ce8c8bcac2e8fa76915a3a4cffc5e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab5417fd3965668e1f3310016d9c430b35fc0a30351add46f43c44e2dc415b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab5417fd3965668e1f3310016d9c430b35fc0a30351add46f43c44e2dc415b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357767149a7c094a393d76c918981bfcb1ce8c8bcac2e8fa76915a3a4cffc5e2"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab5417fd3965668e1f3310016d9c430b35fc0a30351add46f43c44e2dc415b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab5417fd3965668e1f3310016d9c430b35fc0a30351add46f43c44e2dc415b47"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab5417fd3965668e1f3310016d9c430b35fc0a30351add46f43c44e2dc415b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab5417fd3965668e1f3310016d9c430b35fc0a30351add46f43c44e2dc415b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab5417fd3965668e1f3310016d9c430b35fc0a30351add46f43c44e2dc415b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab5417fd3965668e1f3310016d9c430b35fc0a30351add46f43c44e2dc415b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab5417fd3965668e1f3310016d9c430b35fc0a30351add46f43c44e2dc415b47"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab5417fd3965668e1f3310016d9c430b35fc0a30351add46f43c44e2dc415b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab5417fd3965668e1f3310016d9c430b35fc0a30351add46f43c44e2dc415b47"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf"} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77cea577ec408ef0c24a26cc1ef59cc053ce375c87dd6563d70671b1ad88466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77cea577ec408ef0c24a26cc1ef59cc053ce375c87dd6563d70671b1ad88466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77cea577ec408ef0c24a26cc1ef59cc053ce375c87dd6563d70671b1ad88466"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce"} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c77cea577ec408ef0c24a26cc1ef59cc053ce375c87dd6563d70671b1ad88466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c77cea577ec408ef0c24a26cc1ef59cc053ce375c87dd6563d70671b1ad88466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77cea577ec408ef0c24a26cc1ef59cc053ce375c87dd6563d70671b1ad88466"} {"level":"error","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77cea577ec408ef0c24a26cc1ef59cc053ce375c87dd6563d70671b1ad88466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c77cea577ec408ef0c24a26cc1ef59cc053ce375c87dd6563d70671b1ad88466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf"} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77cea577ec408ef0c24a26cc1ef59cc053ce375c87dd6563d70671b1ad88466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c77cea577ec408ef0c24a26cc1ef59cc053ce375c87dd6563d70671b1ad88466","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce"} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77cea577ec408ef0c24a26cc1ef59cc053ce375c87dd6563d70671b1ad88466"} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780"} {"level":"error","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780"} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780"} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc10b8e20ece4d6f823c45c7d7994ec98ee75083a285e668687a2ac0b3682530","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc10b8e20ece4d6f823c45c7d7994ec98ee75083a285e668687a2ac0b3682530","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc10b8e20ece4d6f823c45c7d7994ec98ee75083a285e668687a2ac0b3682530"} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc10b8e20ece4d6f823c45c7d7994ec98ee75083a285e668687a2ac0b3682530","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc10b8e20ece4d6f823c45c7d7994ec98ee75083a285e668687a2ac0b3682530"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187"} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc10b8e20ece4d6f823c45c7d7994ec98ee75083a285e668687a2ac0b3682530","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1110bedbda65cd9dfa562f490a293bf8b2b04d473d65a62b5dcc1a2075dc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1110bedbda65cd9dfa562f490a293bf8b2b04d473d65a62b5dcc1a2075dc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc10b8e20ece4d6f823c45c7d7994ec98ee75083a285e668687a2ac0b3682530"} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1110bedbda65cd9dfa562f490a293bf8b2b04d473d65a62b5dcc1a2075dc2d"} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc10b8e20ece4d6f823c45c7d7994ec98ee75083a285e668687a2ac0b3682530","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1110bedbda65cd9dfa562f490a293bf8b2b04d473d65a62b5dcc1a2075dc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a1110bedbda65cd9dfa562f490a293bf8b2b04d473d65a62b5dcc1a2075dc2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1110bedbda65cd9dfa562f490a293bf8b2b04d473d65a62b5dcc1a2075dc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187"} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1110bedbda65cd9dfa562f490a293bf8b2b04d473d65a62b5dcc1a2075dc2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc10b8e20ece4d6f823c45c7d7994ec98ee75083a285e668687a2ac0b3682530"} {"level":"debug","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780"} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1110bedbda65cd9dfa562f490a293bf8b2b04d473d65a62b5dcc1a2075dc2d"} {"level":"info","ts":"2026-07-24T17:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187"} {"level":"info","ts":"2026-07-24T17:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c13355c4-d5f5-4861-97f7-aef63368d3da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:35040","PortSpecifier":{"PortValue":35040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c13355c4-d5f5-4861-97f7-aef63368d3da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-052d9d.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c13355c4-d5f5-4861-97f7-aef63368d3da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:35040","PortSpecifier":{"PortValue":35040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915399,"nanos":751657203},"http":{"id":"c13355c4-d5f5-4861-97f7-aef63368d3da","method":"POST","headers":{":authority":"e2e-ipp-a-052d9d.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:49:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c13355c4-d5f5-4861-97f7-aef63368d3da","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:49:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c13355c4-d5f5-4861-97f7-aef63368d3da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"77099316-448e-43e9-8b62-c699bfdde580","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"]}} {"level":"debug","ts":"2026-07-24T17:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c13355c4-d5f5-4861-97f7-aef63368d3da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4e6f7d82080"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f030dc8d-2308-4e78-aa41-72ae7dcabbc0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"77099316-448e-43e9-8b62-c699bfdde580","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-052d9d.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c13355c4-d5f5-4861-97f7-aef63368d3da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c13355c4-d5f5-4861-97f7-aef63368d3da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c13355c4-d5f5-4861-97f7-aef63368d3da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-052d9d/ipp-route-052d9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-052d9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c13355c4-d5f5-4861-97f7-aef63368d3da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c13355c4-d5f5-4861-97f7-aef63368d3da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c13355c4-d5f5-4861-97f7-aef63368d3da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c13355c4-d5f5-4861-97f7-aef63368d3da","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c13355c4-d5f5-4861-97f7-aef63368d3da","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"febd543d-7e18-49f3-a205-9be7ef741894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:43552","PortSpecifier":{"PortValue":43552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"febd543d-7e18-49f3-a205-9be7ef741894","method":"POST","path":"/ai-tenant-e2e-ipp-a-052d9d/ipp-route-052d9d/v1/chat/completions","host":"e2e-ipp-a-052d9d.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"febd543d-7e18-49f3-a205-9be7ef741894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:43552","PortSpecifier":{"PortValue":43552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915401,"nanos":825401441},"http":{"id":"febd543d-7e18-49f3-a205-9be7ef741894","method":"POST","headers":{":authority":"e2e-ipp-a-052d9d.apps.eb1aef30-c802-409a-912f-a4e6f7d82080.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-052d9d/ipp-route-052d9d/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"febd543d-7e18-49f3-a205-9be7ef741894","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pwD2k4Db6MFJ1PNw_cCyoQ1C3fLcYGBYDI0i7buCUkbTJ5j6mX60VMXFHQgf"} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"febd543d-7e18-49f3-a205-9be7ef741894","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-052d9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pwD2k4Db6MFJ1PNw_cCyoQ1C3fLcYGBYDI0i7buCUkbTJ5j6mX60VMXFHQgf\"}"} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"febd543d-7e18-49f3-a205-9be7ef741894","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-052d9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ddad415d-27d4-42c9-add7-c086c37a1678","keyName":"e2e-ipp-052d9d","subscription":"ipp-route-052d9d-sub","tenant":"e2e-ipp-a-052d9d","userId":"ddad415d-27d4-42c9-add7-c086c37a1678","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"febd543d-7e18-49f3-a205-9be7ef741894","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-052d9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-052d9d/ipp-route-052d9d\",\"requestedSubscription\":\"ipp-route-052d9d-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"febd543d-7e18-49f3-a205-9be7ef741894","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-052d9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-052d9d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-052d9d-sub","namespace":"ai-tenant-e2e-ipp-a-052d9d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-052d9d/ipp-route-052d9d"}} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"febd543d-7e18-49f3-a205-9be7ef741894","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"febd543d-7e18-49f3-a205-9be7ef741894","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"febd543d-7e18-49f3-a205-9be7ef741894","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"febd543d-7e18-49f3-a205-9be7ef741894","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-052d9d/ipp-route-052d9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-052d9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"febd543d-7e18-49f3-a205-9be7ef741894","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"febd543d-7e18-49f3-a205-9be7ef741894","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"febd543d-7e18-49f3-a205-9be7ef741894","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-052d9d-sub"} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"febd543d-7e18-49f3-a205-9be7ef741894","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"febd543d-7e18-49f3-a205-9be7ef741894","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ddad415d-27d4-42c9-add7-c086c37a1678","keyName":"e2e-ipp-052d9d","selected_subscription":"ipp-route-052d9d-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-052d9d/ipp-route-052d9d-sub@ai-tenant-e2e-ipp-a-052d9d/ipp-route-052d9d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-052d9d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-052d9d-sub","namespace":"ai-tenant-e2e-ipp-a-052d9d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-052d9d/ipp-route-052d9d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"febd543d-7e18-49f3-a205-9be7ef741894","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:50:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"febd543d-7e18-49f3-a205-9be7ef741894","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56c5d479e45fd1d94288ff655622adc2151580e1251cba2fad0cd6eabe5008cf"} {"level":"info","ts":"2026-07-24T17:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/357767149a7c094a393d76c918981bfcb1ce8c8bcac2e8fa76915a3a4cffc5e2"} {"level":"info","ts":"2026-07-24T17:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c77cea577ec408ef0c24a26cc1ef59cc053ce375c87dd6563d70671b1ad88466"} {"level":"info","ts":"2026-07-24T17:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a1110bedbda65cd9dfa562f490a293bf8b2b04d473d65a62b5dcc1a2075dc2d"} {"level":"info","ts":"2026-07-24T17:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc10b8e20ece4d6f823c45c7d7994ec98ee75083a285e668687a2ac0b3682530"} {"level":"info","ts":"2026-07-24T17:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60e89327bafc3ac795feea754df4b4868e2902bd24f59fa6195682e94cd353ce"} {"level":"info","ts":"2026-07-24T17:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3510ea72c7ec0c34a6f5d25246abaa7a6d88d3da73ca096615da6ae48d690a8c"} {"level":"info","ts":"2026-07-24T17:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86b7406dc0f5d53c94ce029bdcc382d29ffb26638160dde6b9f6760d00c07780"} {"level":"info","ts":"2026-07-24T17:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1dff590155de57edc0e08b2fbd522a075142568961a95acf2a590ced539f5cc2"} {"level":"info","ts":"2026-07-24T17:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3dfa948148344ec9654d789f185aa96f28e3d7f969ad4564616dc375c03b187"} {"level":"info","ts":"2026-07-24T17:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab5417fd3965668e1f3310016d9c430b35fc0a30351add46f43c44e2dc415b47"} {"level":"info","ts":"2026-07-24T17:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72829687364be2a9f8a2dad93c08d651567c65fd2653deaab133969205373bde"}