--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eed4b25b-e579-403c-b6a1-44b1ca0bc959","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eed4b25b-e579-403c-b6a1-44b1ca0bc959","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eed4b25b-e579-403c-b6a1-44b1ca0bc959","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eed4b25b-e579-403c-b6a1-44b1ca0bc959","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eed4b25b-e579-403c-b6a1-44b1ca0bc959","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9564af68-22a6-4580-86bb-18675c8c996b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44134","PortSpecifier":{"PortValue":44134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9564af68-22a6-4580-86bb-18675c8c996b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9564af68-22a6-4580-86bb-18675c8c996b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44134","PortSpecifier":{"PortValue":44134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309614,"nanos":843101267},"http":{"id":"9564af68-22a6-4580-86bb-18675c8c996b","method":"GET","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9564af68-22a6-4580-86bb-18675c8c996b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3UIBuoJtRjXvWwXW_i3VHsp1SCoEKTx6dpf4n5p58MhQzsUNZyC9OAl6QIER"} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9564af68-22a6-4580-86bb-18675c8c996b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3UIBuoJtRjXvWwXW_i3VHsp1SCoEKTx6dpf4n5p58MhQzsUNZyC9OAl6QIER\"}"} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9564af68-22a6-4580-86bb-18675c8c996b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f441cec4-e806-4e04-a5fe-c8e00a202b26","keyName":"e2e-auth-iso-a-0f71b2","subscription":"e2e-auth-iso-4e6324","tenant":"e2e-shared-a-3d4103","userId":"f441cec4-e806-4e04-a5fe-c8e00a202b26","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9564af68-22a6-4580-86bb-18675c8c996b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9564af68-22a6-4580-86bb-18675c8c996b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9564af68-22a6-4580-86bb-18675c8c996b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9564af68-22a6-4580-86bb-18675c8c996b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/auth-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9564af68-22a6-4580-86bb-18675c8c996b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9564af68-22a6-4580-86bb-18675c8c996b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4e6324"} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9564af68-22a6-4580-86bb-18675c8c996b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9564af68-22a6-4580-86bb-18675c8c996b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9564af68-22a6-4580-86bb-18675c8c996b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:33:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9564af68-22a6-4580-86bb-18675c8c996b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"info","ts":"2026-07-17T17:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"info","ts":"2026-07-17T17:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"debug","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9a22191-7e85-4e4d-ab19-822d930039f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:34710","PortSpecifier":{"PortValue":34710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9a22191-7e85-4e4d-ab19-822d930039f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9a22191-7e85-4e4d-ab19-822d930039f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:34710","PortSpecifier":{"PortValue":34710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309638,"nanos":219590477},"http":{"id":"a9a22191-7e85-4e4d-ab19-822d930039f4","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9a22191-7e85-4e4d-ab19-822d930039f4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9a22191-7e85-4e4d-ab19-822d930039f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9a22191-7e85-4e4d-ab19-822d930039f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9a22191-7e85-4e4d-ab19-822d930039f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9a22191-7e85-4e4d-ab19-822d930039f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9a22191-7e85-4e4d-ab19-822d930039f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/auth-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9a22191-7e85-4e4d-ab19-822d930039f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9a22191-7e85-4e4d-ab19-822d930039f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9a22191-7e85-4e4d-ab19-822d930039f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9a22191-7e85-4e4d-ab19-822d930039f4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9a22191-7e85-4e4d-ab19-822d930039f4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40208","PortSpecifier":{"PortValue":40208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40208","PortSpecifier":{"PortValue":40208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309638,"nanos":248737426},"http":{"id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","method":"POST","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f5e7b/auth-test-model-4f5e7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f5e7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76fc804b-42f5-4126-baf3-bb6fcae53d9e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df1c73cb-5afe-4141-abbd-94db315b6500","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40218","PortSpecifier":{"PortValue":40218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df1c73cb-5afe-4141-abbd-94db315b6500","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df1c73cb-5afe-4141-abbd-94db315b6500","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40218","PortSpecifier":{"PortValue":40218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309638,"nanos":287568009},"http":{"id":"df1c73cb-5afe-4141-abbd-94db315b6500","method":"GET","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df1c73cb-5afe-4141-abbd-94db315b6500","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fjUbAY2j9zFklFjH_YXogPtYtA2wNUFtZ2HVRX3voBvryEBHO7w56b1ryLBL"} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df1c73cb-5afe-4141-abbd-94db315b6500","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4f5e7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fjUbAY2j9zFklFjH_YXogPtYtA2wNUFtZ2HVRX3voBvryEBHO7w56b1ryLBL\"}"} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df1c73cb-5afe-4141-abbd-94db315b6500","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4f5e7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df1c73cb-5afe-4141-abbd-94db315b6500","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"df1c73cb-5afe-4141-abbd-94db315b6500","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df1c73cb-5afe-4141-abbd-94db315b6500","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-17T17:33:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df1c73cb-5afe-4141-abbd-94db315b6500","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-17T17:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"info","ts":"2026-07-17T17:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"info","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"170ec230-afdc-4533-a43e-66e179ba1c31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46518","PortSpecifier":{"PortValue":46518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"170ec230-afdc-4533-a43e-66e179ba1c31","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"170ec230-afdc-4533-a43e-66e179ba1c31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46518","PortSpecifier":{"PortValue":46518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309657,"nanos":538888039},"http":{"id":"170ec230-afdc-4533-a43e-66e179ba1c31","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"170ec230-afdc-4533-a43e-66e179ba1c31","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"170ec230-afdc-4533-a43e-66e179ba1c31","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"170ec230-afdc-4533-a43e-66e179ba1c31","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"170ec230-afdc-4533-a43e-66e179ba1c31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"170ec230-afdc-4533-a43e-66e179ba1c31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"170ec230-afdc-4533-a43e-66e179ba1c31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/auth-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"170ec230-afdc-4533-a43e-66e179ba1c31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"170ec230-afdc-4533-a43e-66e179ba1c31","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"170ec230-afdc-4533-a43e-66e179ba1c31","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"170ec230-afdc-4533-a43e-66e179ba1c31","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"170ec230-afdc-4533-a43e-66e179ba1c31","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36986","PortSpecifier":{"PortValue":36986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36986","PortSpecifier":{"PortValue":36986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309657,"nanos":595819144},"http":{"id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","method":"POST","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f5e7b/auth-test-model-4f5e7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f5e7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33d80734-3fa7-4e7c-b03b-03f979c456fc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46524","PortSpecifier":{"PortValue":46524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46524","PortSpecifier":{"PortValue":46524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309657,"nanos":642697746},"http":{"id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/auth-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4113f0c-998f-48c3-ae2e-d7f3fe6897eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36994","PortSpecifier":{"PortValue":36994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36994","PortSpecifier":{"PortValue":36994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309657,"nanos":691863295},"http":{"id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","method":"POST","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f5e7b/auth-test-model-4f5e7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f5e7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:34:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57df2ee1-e12b-4a0f-8307-402bbc069d79","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:34:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"info","ts":"2026-07-17T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:34:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"info","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43536","PortSpecifier":{"PortValue":43536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43536","PortSpecifier":{"PortValue":43536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309676,"nanos":887525323},"http":{"id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/auth-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fd220b8-4bfa-42b4-8786-20592591e2bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39546","PortSpecifier":{"PortValue":39546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39546","PortSpecifier":{"PortValue":39546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309676,"nanos":920042161},"http":{"id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","method":"POST","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f5e7b/auth-test-model-4f5e7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f5e7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37511fcb-77d7-41d6-9168-0bfba80b9ff7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39562","PortSpecifier":{"PortValue":39562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","method":"GET","path":"/maas-api/v1/api-keys/e7eb0f5b-9ba9-450c-a062-3dbff327a4cc","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39562","PortSpecifier":{"PortValue":39562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309676,"nanos":956761430},"http":{"id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","method":"GET","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e7eb0f5b-9ba9-450c-a062-3dbff327a4cc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e7eb0f5b-9ba9-450c-a062-3dbff327a4cc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f5e7b/auth-test-model-4f5e7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f5e7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57a48a55-ad84-4ee3-a094-e4979d4c0a33","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43538","PortSpecifier":{"PortValue":43538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","method":"GET","path":"/maas-api/v1/api-keys/e7eb0f5b-9ba9-450c-a062-3dbff327a4cc","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43538","PortSpecifier":{"PortValue":43538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309676,"nanos":982538676},"http":{"id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","method":"GET","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e7eb0f5b-9ba9-450c-a062-3dbff327a4cc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e7eb0f5b-9ba9-450c-a062-3dbff327a4cc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/auth-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bfb9cb1-9dd1-4d29-8742-ff2c35fc62f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"info","ts":"2026-07-17T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"info","ts":"2026-07-17T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"error","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"error","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"debug","ts":"2026-07-17T17:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52232","PortSpecifier":{"PortValue":52232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52232","PortSpecifier":{"PortValue":52232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309694,"nanos":90052695},"http":{"id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/auth-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f21f45f9-bbc8-418d-9427-2f9a4c575d17","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44076","PortSpecifier":{"PortValue":44076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44076","PortSpecifier":{"PortValue":44076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309694,"nanos":125008504},"http":{"id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","method":"POST","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f5e7b/auth-test-model-4f5e7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f5e7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34ef973a-26be-4dbe-a2be-a897730b4ce2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52242","PortSpecifier":{"PortValue":52242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"276605a0-6408-4ca6-aa51-477fd45a3097","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52242","PortSpecifier":{"PortValue":52242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309694,"nanos":160564444},"http":{"id":"276605a0-6408-4ca6-aa51-477fd45a3097","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dHyIleXVag0yE42X_1UUfsGkUtqHHM2uIU4tZljyoD0SNhHBbQY2oEfQhDVH"} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dHyIleXVag0yE42X_1UUfsGkUtqHHM2uIU4tZljyoD0SNhHBbQY2oEfQhDVH\"}"} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d796f169-125b-48fe-8076-aea4b472b3c8","keyName":"e2e-auth-iso-a-6ebdbe","subscription":"e2e-auth-iso-12110c","tenant":"e2e-shared-a-3d4103","userId":"d796f169-125b-48fe-8076-aea4b472b3c8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/auth-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-12110c"} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"276605a0-6408-4ca6-aa51-477fd45a3097","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/015307f4e85cc59b91d1c51be0bcb22616795cf46425b0ec3a10635da75ec060"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24939250f061417814e92a4dc8a9e9bf503a807f6d402dea31358228a47437d1"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9567103d1e39b161ec11c3c19bc1edad8432d5bbc5aa75ca6ce9e44c1ed9f056"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/292fefc89b249f934f047530b2fff59c11c4124be3c7d14865ed8c6670c478c3"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55e9e129296552e27bdc219207746d4cadaeb4a1c7fb1b8e5d6969c6ab447499"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c508bf02217b4acee11bc789a5941a5211b236a14d88c87ad9eb86d3133b2aa"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ad971c95c4f2f9c1eec935c5341c0232ce2ec3982b3a722a12b2e2888ecec95"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51fd8dc1ccfb344f288b9e65d1a989a02382edff9c421fbc34e099c5b2eaff3"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea263c773623e376c1165648ced6a52634466696704d5e0a44f837489ae0a181"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/917b22b92e507398a2c20882e9486771d9eff4596b4b9cbc29c929d249cc0ebe"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba90176bf7d15a97db3139a0b5da554faca94a107cc6d2669e861b3526424e53"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1051513e7a5828c0cd87a8aefc1a671ae75dc09681cfc9541ea6bb355e0d17f"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d6e0280abce94f19aabe48b8ee7f84783e2a8089b71c46db3fcaea5dee6b06b"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5c0353180a31b0131d2155ab3a7e3a467bb2bbd9f2c109e53940cb8d3d2eda9"} {"level":"info","ts":"2026-07-17T17:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31f6b4474fb195a5795d40793e456d6653b1cf89909d4dce76da0f71374a2885"} {"level":"info","ts":"2026-07-17T17:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b80c36ce70e32c405ab1fddaa7e2b126592955eab0249b9d3f896449ec2636a"} {"level":"debug","ts":"2026-07-17T17:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96881f265d08fe520545c867755db10bd82bc7d4fd93d8586821f8210e5cfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96881f265d08fe520545c867755db10bd82bc7d4fd93d8586821f8210e5cfb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d96881f265d08fe520545c867755db10bd82bc7d4fd93d8586821f8210e5cfb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d96881f265d08fe520545c867755db10bd82bc7d4fd93d8586821f8210e5cfb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96881f265d08fe520545c867755db10bd82bc7d4fd93d8586821f8210e5cfb0"} {"level":"debug","ts":"2026-07-17T17:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d96881f265d08fe520545c867755db10bd82bc7d4fd93d8586821f8210e5cfb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96881f265d08fe520545c867755db10bd82bc7d4fd93d8586821f8210e5cfb0"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96881f265d08fe520545c867755db10bd82bc7d4fd93d8586821f8210e5cfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d96881f265d08fe520545c867755db10bd82bc7d4fd93d8586821f8210e5cfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96881f265d08fe520545c867755db10bd82bc7d4fd93d8586821f8210e5cfb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d96881f265d08fe520545c867755db10bd82bc7d4fd93d8586821f8210e5cfb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96881f265d08fe520545c867755db10bd82bc7d4fd93d8586821f8210e5cfb0"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d39711fc161b3bc737686a8abd6c7ecfb9beeff295d289b93da8854a8676b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d39711fc161b3bc737686a8abd6c7ecfb9beeff295d289b93da8854a8676b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d39711fc161b3bc737686a8abd6c7ecfb9beeff295d289b93da8854a8676b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d39711fc161b3bc737686a8abd6c7ecfb9beeff295d289b93da8854a8676b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d39711fc161b3bc737686a8abd6c7ecfb9beeff295d289b93da8854a8676b4"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d39711fc161b3bc737686a8abd6c7ecfb9beeff295d289b93da8854a8676b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d39711fc161b3bc737686a8abd6c7ecfb9beeff295d289b93da8854a8676b4"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d39711fc161b3bc737686a8abd6c7ecfb9beeff295d289b93da8854a8676b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74d39711fc161b3bc737686a8abd6c7ecfb9beeff295d289b93da8854a8676b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d39711fc161b3bc737686a8abd6c7ecfb9beeff295d289b93da8854a8676b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d39711fc161b3bc737686a8abd6c7ecfb9beeff295d289b93da8854a8676b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d39711fc161b3bc737686a8abd6c7ecfb9beeff295d289b93da8854a8676b4"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7623da19163a92a4da001aefc873a340e196426c8dc692f7c9d1b19a702ce87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7623da19163a92a4da001aefc873a340e196426c8dc692f7c9d1b19a702ce87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7623da19163a92a4da001aefc873a340e196426c8dc692f7c9d1b19a702ce87"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7623da19163a92a4da001aefc873a340e196426c8dc692f7c9d1b19a702ce87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7623da19163a92a4da001aefc873a340e196426c8dc692f7c9d1b19a702ce87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7623da19163a92a4da001aefc873a340e196426c8dc692f7c9d1b19a702ce87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7623da19163a92a4da001aefc873a340e196426c8dc692f7c9d1b19a702ce87"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7623da19163a92a4da001aefc873a340e196426c8dc692f7c9d1b19a702ce87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7623da19163a92a4da001aefc873a340e196426c8dc692f7c9d1b19a702ce87"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f"} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57"} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57"} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8"} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25"} {"level":"error","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8"} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d64c4609a10c77741deb23bced5e22186b993dfb887623bac57e860d538cbcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d64c4609a10c77741deb23bced5e22186b993dfb887623bac57e860d538cbcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d64c4609a10c77741deb23bced5e22186b993dfb887623bac57e860d538cbcab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d64c4609a10c77741deb23bced5e22186b993dfb887623bac57e860d538cbcab"} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d64c4609a10c77741deb23bced5e22186b993dfb887623bac57e860d538cbcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d64c4609a10c77741deb23bced5e22186b993dfb887623bac57e860d538cbcab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d64c4609a10c77741deb23bced5e22186b993dfb887623bac57e860d538cbcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d64c4609a10c77741deb23bced5e22186b993dfb887623bac57e860d538cbcab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d64c4609a10c77741deb23bced5e22186b993dfb887623bac57e860d538cbcab"} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd37039f9752f564c9b319c36106055f3ae12ee05f7a2c9b6ffcce9b44c21921","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd37039f9752f564c9b319c36106055f3ae12ee05f7a2c9b6ffcce9b44c21921","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29c957e17c8db74208f42ef956583ad9995b497053293848f22d8ed7a14a09c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd37039f9752f564c9b319c36106055f3ae12ee05f7a2c9b6ffcce9b44c21921"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29c957e17c8db74208f42ef956583ad9995b497053293848f22d8ed7a14a09c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd37039f9752f564c9b319c36106055f3ae12ee05f7a2c9b6ffcce9b44c21921","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd37039f9752f564c9b319c36106055f3ae12ee05f7a2c9b6ffcce9b44c21921"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd37039f9752f564c9b319c36106055f3ae12ee05f7a2c9b6ffcce9b44c21921","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1655681e55f14fb9e7626d56f3d87ee4337264e37ffdf8e08a77db24e65f536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29c957e17c8db74208f42ef956583ad9995b497053293848f22d8ed7a14a09c"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1655681e55f14fb9e7626d56f3d87ee4337264e37ffdf8e08a77db24e65f536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29c957e17c8db74208f42ef956583ad9995b497053293848f22d8ed7a14a09c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b29c957e17c8db74208f42ef956583ad9995b497053293848f22d8ed7a14a09c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd37039f9752f564c9b319c36106055f3ae12ee05f7a2c9b6ffcce9b44c21921"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29c957e17c8db74208f42ef956583ad9995b497053293848f22d8ed7a14a09c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd37039f9752f564c9b319c36106055f3ae12ee05f7a2c9b6ffcce9b44c21921","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1655681e55f14fb9e7626d56f3d87ee4337264e37ffdf8e08a77db24e65f536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1655681e55f14fb9e7626d56f3d87ee4337264e37ffdf8e08a77db24e65f536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29c957e17c8db74208f42ef956583ad9995b497053293848f22d8ed7a14a09c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1655681e55f14fb9e7626d56f3d87ee4337264e37ffdf8e08a77db24e65f536","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1655681e55f14fb9e7626d56f3d87ee4337264e37ffdf8e08a77db24e65f536"} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1655681e55f14fb9e7626d56f3d87ee4337264e37ffdf8e08a77db24e65f536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1655681e55f14fb9e7626d56f3d87ee4337264e37ffdf8e08a77db24e65f536"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1655681e55f14fb9e7626d56f3d87ee4337264e37ffdf8e08a77db24e65f536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d649064437bf037d3c222eb594ba13f296d56d50221d74ae88431205b5017d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29c957e17c8db74208f42ef956583ad9995b497053293848f22d8ed7a14a09c"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d649064437bf037d3c222eb594ba13f296d56d50221d74ae88431205b5017d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1655681e55f14fb9e7626d56f3d87ee4337264e37ffdf8e08a77db24e65f536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd37039f9752f564c9b319c36106055f3ae12ee05f7a2c9b6ffcce9b44c21921"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d649064437bf037d3c222eb594ba13f296d56d50221d74ae88431205b5017d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba63f1e8717c1a608be0b637e01c84e0481ae9298524fcdb5a2a48ab50f2a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba63f1e8717c1a608be0b637e01c84e0481ae9298524fcdb5a2a48ab50f2a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d649064437bf037d3c222eb594ba13f296d56d50221d74ae88431205b5017d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba63f1e8717c1a608be0b637e01c84e0481ae9298524fcdb5a2a48ab50f2a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba63f1e8717c1a608be0b637e01c84e0481ae9298524fcdb5a2a48ab50f2a2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1655681e55f14fb9e7626d56f3d87ee4337264e37ffdf8e08a77db24e65f536"} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d649064437bf037d3c222eb594ba13f296d56d50221d74ae88431205b5017d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d649064437bf037d3c222eb594ba13f296d56d50221d74ae88431205b5017d"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d649064437bf037d3c222eb594ba13f296d56d50221d74ae88431205b5017d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba63f1e8717c1a608be0b637e01c84e0481ae9298524fcdb5a2a48ab50f2a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d649064437bf037d3c222eb594ba13f296d56d50221d74ae88431205b5017d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53d649064437bf037d3c222eb594ba13f296d56d50221d74ae88431205b5017d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d649064437bf037d3c222eb594ba13f296d56d50221d74ae88431205b5017d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba63f1e8717c1a608be0b637e01c84e0481ae9298524fcdb5a2a48ab50f2a2d"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d18e2b324cf66f3f1c92a469d13ca45988856e8a10c2b1b0f8de4044745d711a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d649064437bf037d3c222eb594ba13f296d56d50221d74ae88431205b5017d"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d18e2b324cf66f3f1c92a469d13ca45988856e8a10c2b1b0f8de4044745d711a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d649064437bf037d3c222eb594ba13f296d56d50221d74ae88431205b5017d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba63f1e8717c1a608be0b637e01c84e0481ae9298524fcdb5a2a48ab50f2a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cba63f1e8717c1a608be0b637e01c84e0481ae9298524fcdb5a2a48ab50f2a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba63f1e8717c1a608be0b637e01c84e0481ae9298524fcdb5a2a48ab50f2a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0886ca3fdc7e4f211a4316f255a0455fc66a5319811cb1ed9276232ba00f41d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0886ca3fdc7e4f211a4316f255a0455fc66a5319811cb1ed9276232ba00f41d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d18e2b324cf66f3f1c92a469d13ca45988856e8a10c2b1b0f8de4044745d711a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d18e2b324cf66f3f1c92a469d13ca45988856e8a10c2b1b0f8de4044745d711a"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d18e2b324cf66f3f1c92a469d13ca45988856e8a10c2b1b0f8de4044745d711a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba63f1e8717c1a608be0b637e01c84e0481ae9298524fcdb5a2a48ab50f2a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0886ca3fdc7e4f211a4316f255a0455fc66a5319811cb1ed9276232ba00f41d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0886ca3fdc7e4f211a4316f255a0455fc66a5319811cb1ed9276232ba00f41d3"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0886ca3fdc7e4f211a4316f255a0455fc66a5319811cb1ed9276232ba00f41d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d18e2b324cf66f3f1c92a469d13ca45988856e8a10c2b1b0f8de4044745d711a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d18e2b324cf66f3f1c92a469d13ca45988856e8a10c2b1b0f8de4044745d711a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba63f1e8717c1a608be0b637e01c84e0481ae9298524fcdb5a2a48ab50f2a2d"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d18e2b324cf66f3f1c92a469d13ca45988856e8a10c2b1b0f8de4044745d711a"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d18e2b324cf66f3f1c92a469d13ca45988856e8a10c2b1b0f8de4044745d711a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4a839f949508415c65605c1547cc6fe03ab14a1d8ce7b68d7dc94125558d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4a839f949508415c65605c1547cc6fe03ab14a1d8ce7b68d7dc94125558d42"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4a839f949508415c65605c1547cc6fe03ab14a1d8ce7b68d7dc94125558d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0886ca3fdc7e4f211a4316f255a0455fc66a5319811cb1ed9276232ba00f41d3"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d18e2b324cf66f3f1c92a469d13ca45988856e8a10c2b1b0f8de4044745d711a"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4a839f949508415c65605c1547cc6fe03ab14a1d8ce7b68d7dc94125558d42"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0886ca3fdc7e4f211a4316f255a0455fc66a5319811cb1ed9276232ba00f41d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0886ca3fdc7e4f211a4316f255a0455fc66a5319811cb1ed9276232ba00f41d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0886ca3fdc7e4f211a4316f255a0455fc66a5319811cb1ed9276232ba00f41d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d18e2b324cf66f3f1c92a469d13ca45988856e8a10c2b1b0f8de4044745d711a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4a839f949508415c65605c1547cc6fe03ab14a1d8ce7b68d7dc94125558d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc4a839f949508415c65605c1547cc6fe03ab14a1d8ce7b68d7dc94125558d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0886ca3fdc7e4f211a4316f255a0455fc66a5319811cb1ed9276232ba00f41d3"} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4a839f949508415c65605c1547cc6fe03ab14a1d8ce7b68d7dc94125558d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0886ca3fdc7e4f211a4316f255a0455fc66a5319811cb1ed9276232ba00f41d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4a839f949508415c65605c1547cc6fe03ab14a1d8ce7b68d7dc94125558d42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4a839f949508415c65605c1547cc6fe03ab14a1d8ce7b68d7dc94125558d42"} {"level":"info","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"978bbd02-d514-4030-af48-73c3933db4b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48096","PortSpecifier":{"PortValue":48096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"978bbd02-d514-4030-af48-73c3933db4b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"978bbd02-d514-4030-af48-73c3933db4b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48096","PortSpecifier":{"PortValue":48096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309752,"nanos":542165634},"http":{"id":"978bbd02-d514-4030-af48-73c3933db4b3","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"978bbd02-d514-4030-af48-73c3933db4b3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"978bbd02-d514-4030-af48-73c3933db4b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"978bbd02-d514-4030-af48-73c3933db4b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"978bbd02-d514-4030-af48-73c3933db4b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"978bbd02-d514-4030-af48-73c3933db4b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"978bbd02-d514-4030-af48-73c3933db4b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/sub-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"978bbd02-d514-4030-af48-73c3933db4b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"978bbd02-d514-4030-af48-73c3933db4b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"978bbd02-d514-4030-af48-73c3933db4b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"978bbd02-d514-4030-af48-73c3933db4b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"978bbd02-d514-4030-af48-73c3933db4b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10d24646-c424-41b5-830f-63b36329a732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59540","PortSpecifier":{"PortValue":59540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10d24646-c424-41b5-830f-63b36329a732","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10d24646-c424-41b5-830f-63b36329a732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59540","PortSpecifier":{"PortValue":59540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309752,"nanos":580071086},"http":{"id":"10d24646-c424-41b5-830f-63b36329a732","method":"POST","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10d24646-c424-41b5-830f-63b36329a732","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10d24646-c424-41b5-830f-63b36329a732","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10d24646-c424-41b5-830f-63b36329a732","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10d24646-c424-41b5-830f-63b36329a732","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10d24646-c424-41b5-830f-63b36329a732","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10d24646-c424-41b5-830f-63b36329a732","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f5e7b/sub-test-model-4f5e7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f5e7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10d24646-c424-41b5-830f-63b36329a732","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10d24646-c424-41b5-830f-63b36329a732","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10d24646-c424-41b5-830f-63b36329a732","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10d24646-c424-41b5-830f-63b36329a732","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10d24646-c424-41b5-830f-63b36329a732","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48102","PortSpecifier":{"PortValue":48102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48102","PortSpecifier":{"PortValue":48102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309752,"nanos":614662432},"http":{"id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","method":"GET","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KyVuYefLlTwlAq9K_NQRt3SEIkXG8MxK3HUYQfgJdCnJgzXT0X40aeRNBTcw"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KyVuYefLlTwlAq9K_NQRt3SEIkXG8MxK3HUYQfgJdCnJgzXT0X40aeRNBTcw\"}"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ef93af3e-adda-44d2-8d64-e08ce6477631","keyName":"e2e-sub-iso-4600f3","subscription":"e2e-a-only-af2424","tenant":"e2e-shared-a-3d4103","userId":"ef93af3e-adda-44d2-8d64-e08ce6477631","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/sub-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-af2424"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bcdffb2-b6fe-4d55-825e-1fc99f2d3685","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59552","PortSpecifier":{"PortValue":59552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59552","PortSpecifier":{"PortValue":59552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309752,"nanos":644747651},"http":{"id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","method":"GET","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7fYQTDfhCxH41jyJ_8N0tax8GUZVLy5V5Z5Z9tYije5dtVmmpRtNoN3g5lxJ"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4f5e7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7fYQTDfhCxH41jyJ_8N0tax8GUZVLy5V5Z5Z9tYije5dtVmmpRtNoN3g5lxJ\"}"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4f5e7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"31f02213-298c-4aab-9d75-d16350751cae","keyName":"e2e-sub-iso-358c83","subscription":"e2e-b-only-af2424","tenant":"e2e-shared-b-4f5e7b","userId":"31f02213-298c-4aab-9d75-d16350751cae","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f5e7b/sub-test-model-4f5e7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f5e7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-af2424"} {"level":"info","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"826a5a8a-ade2-4a98-8bbe-76b05f059bab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0084ce74-e949-4a05-8f06-7943675051f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40738","PortSpecifier":{"PortValue":40738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0084ce74-e949-4a05-8f06-7943675051f8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0084ce74-e949-4a05-8f06-7943675051f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40738","PortSpecifier":{"PortValue":40738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309772,"nanos":659795344},"http":{"id":"0084ce74-e949-4a05-8f06-7943675051f8","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0084ce74-e949-4a05-8f06-7943675051f8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0084ce74-e949-4a05-8f06-7943675051f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0084ce74-e949-4a05-8f06-7943675051f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0084ce74-e949-4a05-8f06-7943675051f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0084ce74-e949-4a05-8f06-7943675051f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0084ce74-e949-4a05-8f06-7943675051f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/sub-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0084ce74-e949-4a05-8f06-7943675051f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0084ce74-e949-4a05-8f06-7943675051f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0084ce74-e949-4a05-8f06-7943675051f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0084ce74-e949-4a05-8f06-7943675051f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0084ce74-e949-4a05-8f06-7943675051f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38440","PortSpecifier":{"PortValue":38440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38440","PortSpecifier":{"PortValue":38440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309772,"nanos":697846379},"http":{"id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","method":"POST","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f5e7b/sub-test-model-4f5e7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f5e7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4709321b-803f-4ac1-a45f-05291e2fc8e5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53dea929-102b-4664-977f-f07415ee0901","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40752","PortSpecifier":{"PortValue":40752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53dea929-102b-4664-977f-f07415ee0901","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53dea929-102b-4664-977f-f07415ee0901","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40752","PortSpecifier":{"PortValue":40752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309772,"nanos":732292582},"http":{"id":"53dea929-102b-4664-977f-f07415ee0901","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53dea929-102b-4664-977f-f07415ee0901","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JVv4NXwBc1uT1S7D_OljogTdKeOJ1nvzcScee3YZLFFKVVhofwreFuZDKMqQ"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53dea929-102b-4664-977f-f07415ee0901","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JVv4NXwBc1uT1S7D_OljogTdKeOJ1nvzcScee3YZLFFKVVhofwreFuZDKMqQ\"}"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53dea929-102b-4664-977f-f07415ee0901","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4ac97432-6593-40d9-9730-0f301c5de8ff","keyName":"e2e-sub-iso-be1e76","subscription":"e2e-shared-sub-6a7444","tenant":"e2e-shared-a-3d4103","userId":"4ac97432-6593-40d9-9730-0f301c5de8ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53dea929-102b-4664-977f-f07415ee0901","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53dea929-102b-4664-977f-f07415ee0901","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53dea929-102b-4664-977f-f07415ee0901","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53dea929-102b-4664-977f-f07415ee0901","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/sub-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53dea929-102b-4664-977f-f07415ee0901","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53dea929-102b-4664-977f-f07415ee0901","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53dea929-102b-4664-977f-f07415ee0901","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53dea929-102b-4664-977f-f07415ee0901","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-6a7444"} {"level":"info","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53dea929-102b-4664-977f-f07415ee0901","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53dea929-102b-4664-977f-f07415ee0901","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38444","PortSpecifier":{"PortValue":38444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"525df2fa-e320-4507-afef-9fdd3ce60083","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38444","PortSpecifier":{"PortValue":38444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309772,"nanos":761245368},"http":{"id":"525df2fa-e320-4507-afef-9fdd3ce60083","method":"POST","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3ohDJHm2cknfPNtL_Gx4WjppdBvgxAKPoxxVCtY6dU8U3WxWDbFwnx3RiH6z"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4f5e7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3ohDJHm2cknfPNtL_Gx4WjppdBvgxAKPoxxVCtY6dU8U3WxWDbFwnx3RiH6z\"}"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4f5e7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9def4e18-3728-4db6-b72a-2c1b8a2c0e9d","keyName":"e2e-sub-iso-7a76f7","subscription":"e2e-shared-sub-6a7444","tenant":"e2e-shared-b-4f5e7b","userId":"9def4e18-3728-4db6-b72a-2c1b8a2c0e9d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f5e7b/sub-test-model-4f5e7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f5e7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-6a7444"} {"level":"info","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"525df2fa-e320-4507-afef-9fdd3ce60083","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b29c957e17c8db74208f42ef956583ad9995b497053293848f22d8ed7a14a09c"} {"level":"info","ts":"2026-07-17T17:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7623da19163a92a4da001aefc873a340e196426c8dc692f7c9d1b19a702ce87"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74d39711fc161b3bc737686a8abd6c7ecfb9beeff295d289b93da8854a8676b4"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd37039f9752f564c9b319c36106055f3ae12ee05f7a2c9b6ffcce9b44c21921"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53d649064437bf037d3c222eb594ba13f296d56d50221d74ae88431205b5017d"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0886ca3fdc7e4f211a4316f255a0455fc66a5319811cb1ed9276232ba00f41d3"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d96881f265d08fe520545c867755db10bd82bc7d4fd93d8586821f8210e5cfb0"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1374054e41f0e0532f1a77e7307e296fb31a5cf4cf76871d59ec47477201d55"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bf8cea004d734e780ba2bd775ab96527ff307a5ce43fcf5fbc9b67a06e7faf8"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7ccc6a56f2e327f53e11ea47d37b22dd21a5151f1578db0d20ee84fc4e2ec1f"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d18e2b324cf66f3f1c92a469d13ca45988856e8a10c2b1b0f8de4044745d711a"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af64e582a4d64f30de28dcb42f0562e1e401afe2ba0edf7fce28658ea961af25"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1655681e55f14fb9e7626d56f3d87ee4337264e37ffdf8e08a77db24e65f536"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d64c4609a10c77741deb23bced5e22186b993dfb887623bac57e860d538cbcab"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cba63f1e8717c1a608be0b637e01c84e0481ae9298524fcdb5a2a48ab50f2a2d"} {"level":"info","ts":"2026-07-17T17:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc4a839f949508415c65605c1547cc6fe03ab14a1d8ce7b68d7dc94125558d42"} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424"} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424"} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424"} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424"} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287"} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287"} {"level":"debug","ts":"2026-07-17T17:37:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"982cbcb05971be88a8e5b6865c6c28202a9ec9a371569ea28996f2467249b0e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"982cbcb05971be88a8e5b6865c6c28202a9ec9a371569ea28996f2467249b0e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"982cbcb05971be88a8e5b6865c6c28202a9ec9a371569ea28996f2467249b0e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/982cbcb05971be88a8e5b6865c6c28202a9ec9a371569ea28996f2467249b0e4"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"982cbcb05971be88a8e5b6865c6c28202a9ec9a371569ea28996f2467249b0e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"982cbcb05971be88a8e5b6865c6c28202a9ec9a371569ea28996f2467249b0e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["982cbcb05971be88a8e5b6865c6c28202a9ec9a371569ea28996f2467249b0e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"982cbcb05971be88a8e5b6865c6c28202a9ec9a371569ea28996f2467249b0e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/982cbcb05971be88a8e5b6865c6c28202a9ec9a371569ea28996f2467249b0e4"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"982cbcb05971be88a8e5b6865c6c28202a9ec9a371569ea28996f2467249b0e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/982cbcb05971be88a8e5b6865c6c28202a9ec9a371569ea28996f2467249b0e4"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"592c0824c623823274dda219186b349cebaca7345692f7168ff71cdfafb07f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"592c0824c623823274dda219186b349cebaca7345692f7168ff71cdfafb07f9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"592c0824c623823274dda219186b349cebaca7345692f7168ff71cdfafb07f9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"592c0824c623823274dda219186b349cebaca7345692f7168ff71cdfafb07f9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/592c0824c623823274dda219186b349cebaca7345692f7168ff71cdfafb07f9a"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"592c0824c623823274dda219186b349cebaca7345692f7168ff71cdfafb07f9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/592c0824c623823274dda219186b349cebaca7345692f7168ff71cdfafb07f9a"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"592c0824c623823274dda219186b349cebaca7345692f7168ff71cdfafb07f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["592c0824c623823274dda219186b349cebaca7345692f7168ff71cdfafb07f9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"592c0824c623823274dda219186b349cebaca7345692f7168ff71cdfafb07f9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"592c0824c623823274dda219186b349cebaca7345692f7168ff71cdfafb07f9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/592c0824c623823274dda219186b349cebaca7345692f7168ff71cdfafb07f9a"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274"} {"level":"error","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1666ef04e4b29cf583c2403d1c2858adc399b4b4114c03caa7943895fb606c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1666ef04e4b29cf583c2403d1c2858adc399b4b4114c03caa7943895fb606c45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1666ef04e4b29cf583c2403d1c2858adc399b4b4114c03caa7943895fb606c45"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1666ef04e4b29cf583c2403d1c2858adc399b4b4114c03caa7943895fb606c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1666ef04e4b29cf583c2403d1c2858adc399b4b4114c03caa7943895fb606c45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1666ef04e4b29cf583c2403d1c2858adc399b4b4114c03caa7943895fb606c45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1666ef04e4b29cf583c2403d1c2858adc399b4b4114c03caa7943895fb606c45"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1666ef04e4b29cf583c2403d1c2858adc399b4b4114c03caa7943895fb606c45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57"} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5319a12f76038b94bec4f8a214e2d03b299e979904171482864535851919c672"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5319a12f76038b94bec4f8a214e2d03b299e979904171482864535851919c672","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5319a12f76038b94bec4f8a214e2d03b299e979904171482864535851919c672"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5319a12f76038b94bec4f8a214e2d03b299e979904171482864535851919c672","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17b53041c4fe8dac95d2f61b4194d00690bebc549d995262a4cf6490589e1d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b53041c4fe8dac95d2f61b4194d00690bebc549d995262a4cf6490589e1d1a"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548762977c39aa9689d725e642f89c4478f8e2e8d4cd929110ac2444d16b84e8"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5319a12f76038b94bec4f8a214e2d03b299e979904171482864535851919c672"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17b53041c4fe8dac95d2f61b4194d00690bebc549d995262a4cf6490589e1d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548762977c39aa9689d725e642f89c4478f8e2e8d4cd929110ac2444d16b84e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["548762977c39aa9689d725e642f89c4478f8e2e8d4cd929110ac2444d16b84e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eed2a3718a5712a0e7860ef1a73c4af51c860f81c69760d99db86b8110f3c9b"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b53041c4fe8dac95d2f61b4194d00690bebc549d995262a4cf6490589e1d1a"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548762977c39aa9689d725e642f89c4478f8e2e8d4cd929110ac2444d16b84e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5319a12f76038b94bec4f8a214e2d03b299e979904171482864535851919c672","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eed2a3718a5712a0e7860ef1a73c4af51c860f81c69760d99db86b8110f3c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eed2a3718a5712a0e7860ef1a73c4af51c860f81c69760d99db86b8110f3c9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548762977c39aa9689d725e642f89c4478f8e2e8d4cd929110ac2444d16b84e8"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eed2a3718a5712a0e7860ef1a73c4af51c860f81c69760d99db86b8110f3c9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17b53041c4fe8dac95d2f61b4194d00690bebc549d995262a4cf6490589e1d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17b53041c4fe8dac95d2f61b4194d00690bebc549d995262a4cf6490589e1d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b5fbcaf417fa9393ef1b5a5faa964a831779e6cbb4ba4a9cb856f95450a3f5f"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eed2a3718a5712a0e7860ef1a73c4af51c860f81c69760d99db86b8110f3c9b"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17b53041c4fe8dac95d2f61b4194d00690bebc549d995262a4cf6490589e1d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e8072a2f620b062884f60ffe878ccdb7449db1a86ba5fca5ae46bf7fa811b7e"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b53041c4fe8dac95d2f61b4194d00690bebc549d995262a4cf6490589e1d1a"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13b3b7eb285256feff751c6555743205fe83770b106d2930896e107e14d7222"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548762977c39aa9689d725e642f89c4478f8e2e8d4cd929110ac2444d16b84e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b5fbcaf417fa9393ef1b5a5faa964a831779e6cbb4ba4a9cb856f95450a3f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b5fbcaf417fa9393ef1b5a5faa964a831779e6cbb4ba4a9cb856f95450a3f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b5fbcaf417fa9393ef1b5a5faa964a831779e6cbb4ba4a9cb856f95450a3f5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eed2a3718a5712a0e7860ef1a73c4af51c860f81c69760d99db86b8110f3c9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e8072a2f620b062884f60ffe878ccdb7449db1a86ba5fca5ae46bf7fa811b7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e8072a2f620b062884f60ffe878ccdb7449db1a86ba5fca5ae46bf7fa811b7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b5fbcaf417fa9393ef1b5a5faa964a831779e6cbb4ba4a9cb856f95450a3f5f"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e8072a2f620b062884f60ffe878ccdb7449db1a86ba5fca5ae46bf7fa811b7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e8072a2f620b062884f60ffe878ccdb7449db1a86ba5fca5ae46bf7fa811b7e"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17b53041c4fe8dac95d2f61b4194d00690bebc549d995262a4cf6490589e1d1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c13b3b7eb285256feff751c6555743205fe83770b106d2930896e107e14d7222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c13b3b7eb285256feff751c6555743205fe83770b106d2930896e107e14d7222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c13b3b7eb285256feff751c6555743205fe83770b106d2930896e107e14d7222","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13b3b7eb285256feff751c6555743205fe83770b106d2930896e107e14d7222"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b5fbcaf417fa9393ef1b5a5faa964a831779e6cbb4ba4a9cb856f95450a3f5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e8072a2f620b062884f60ffe878ccdb7449db1a86ba5fca5ae46bf7fa811b7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c13b3b7eb285256feff751c6555743205fe83770b106d2930896e107e14d7222","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba"} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba"} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba"} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba"} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T17:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T17:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T17:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba"} {"level":"info","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43142","PortSpecifier":{"PortValue":43142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43142","PortSpecifier":{"PortValue":43142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309851,"nanos":539697040},"http":{"id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"479fc3b6-5954-4b5e-8e4a-1712ad674038","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ede21dad-63f0-449e-841a-6ac662a882df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36746","PortSpecifier":{"PortValue":36746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ede21dad-63f0-449e-841a-6ac662a882df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ede21dad-63f0-449e-841a-6ac662a882df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36746","PortSpecifier":{"PortValue":36746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309851,"nanos":583381803},"http":{"id":"ede21dad-63f0-449e-841a-6ac662a882df","method":"POST","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ede21dad-63f0-449e-841a-6ac662a882df","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ede21dad-63f0-449e-841a-6ac662a882df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ede21dad-63f0-449e-841a-6ac662a882df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ede21dad-63f0-449e-841a-6ac662a882df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ede21dad-63f0-449e-841a-6ac662a882df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ede21dad-63f0-449e-841a-6ac662a882df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f5e7b/rate-test-model-4f5e7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f5e7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ede21dad-63f0-449e-841a-6ac662a882df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ede21dad-63f0-449e-841a-6ac662a882df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ede21dad-63f0-449e-841a-6ac662a882df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ede21dad-63f0-449e-841a-6ac662a882df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ede21dad-63f0-449e-841a-6ac662a882df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43158","PortSpecifier":{"PortValue":43158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","method":"POST","path":"/ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103/v1/completions","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43158","PortSpecifier":{"PortValue":43158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309851,"nanos":626019706},"http":{"id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WczRRC3dr606kLuW_1Z3cPLDMTO2TkpHkYpwjgWmMRnxco53QoivygnCMg7"} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WczRRC3dr606kLuW_1Z3cPLDMTO2TkpHkYpwjgWmMRnxco53QoivygnCMg7\"}"} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8c11579c-3a31-41c7-aa12-6179e9054164","keyName":"e2e-rate-a-fa0cc1","subscription":"e2e-rate-iso-a-fa0cc1","tenant":"e2e-shared-a-3d4103","userId":"8c11579c-3a31-41c7-aa12-6179e9054164","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\",\"requestedSubscription\":\"e2e-rate-iso-a-fa0cc1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3d4103","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa0cc1","namespace":"ai-tenant-e2e-shared-a-3d4103","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa0cc1"} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8c11579c-3a31-41c7-aa12-6179e9054164","keyName":"e2e-rate-a-fa0cc1","selected_subscription":"e2e-rate-iso-a-fa0cc1","selected_subscription_key":"ai-tenant-e2e-shared-a-3d4103/e2e-rate-iso-a-fa0cc1@ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3d4103","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa0cc1","namespace":"ai-tenant-e2e-shared-a-3d4103","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:37:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c33297cd-2629-41d7-b24b-fbe23cb9ecbe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11873c16-8554-4199-b085-8c3f19dc794b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43172","PortSpecifier":{"PortValue":43172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11873c16-8554-4199-b085-8c3f19dc794b","method":"POST","path":"/ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103/v1/completions","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11873c16-8554-4199-b085-8c3f19dc794b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43172","PortSpecifier":{"PortValue":43172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309852,"nanos":692425036},"http":{"id":"11873c16-8554-4199-b085-8c3f19dc794b","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11873c16-8554-4199-b085-8c3f19dc794b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WczRRC3dr606kLuW_1Z3cPLDMTO2TkpHkYpwjgWmMRnxco53QoivygnCMg7"} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11873c16-8554-4199-b085-8c3f19dc794b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WczRRC3dr606kLuW_1Z3cPLDMTO2TkpHkYpwjgWmMRnxco53QoivygnCMg7\"}"} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11873c16-8554-4199-b085-8c3f19dc794b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8c11579c-3a31-41c7-aa12-6179e9054164","keyName":"e2e-rate-a-fa0cc1","subscription":"e2e-rate-iso-a-fa0cc1","tenant":"e2e-shared-a-3d4103","userId":"8c11579c-3a31-41c7-aa12-6179e9054164","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11873c16-8554-4199-b085-8c3f19dc794b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\",\"requestedSubscription\":\"e2e-rate-iso-a-fa0cc1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11873c16-8554-4199-b085-8c3f19dc794b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3d4103","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa0cc1","namespace":"ai-tenant-e2e-shared-a-3d4103","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11873c16-8554-4199-b085-8c3f19dc794b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11873c16-8554-4199-b085-8c3f19dc794b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11873c16-8554-4199-b085-8c3f19dc794b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11873c16-8554-4199-b085-8c3f19dc794b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11873c16-8554-4199-b085-8c3f19dc794b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11873c16-8554-4199-b085-8c3f19dc794b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11873c16-8554-4199-b085-8c3f19dc794b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa0cc1"} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11873c16-8554-4199-b085-8c3f19dc794b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11873c16-8554-4199-b085-8c3f19dc794b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8c11579c-3a31-41c7-aa12-6179e9054164","keyName":"e2e-rate-a-fa0cc1","selected_subscription":"e2e-rate-iso-a-fa0cc1","selected_subscription_key":"ai-tenant-e2e-shared-a-3d4103/e2e-rate-iso-a-fa0cc1@ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3d4103","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa0cc1","namespace":"ai-tenant-e2e-shared-a-3d4103","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11873c16-8554-4199-b085-8c3f19dc794b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:37:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11873c16-8554-4199-b085-8c3f19dc794b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43184","PortSpecifier":{"PortValue":43184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","method":"POST","path":"/ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103/v1/completions","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43184","PortSpecifier":{"PortValue":43184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309853,"nanos":733582644},"http":{"id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WczRRC3dr606kLuW_1Z3cPLDMTO2TkpHkYpwjgWmMRnxco53QoivygnCMg7"} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WczRRC3dr606kLuW_1Z3cPLDMTO2TkpHkYpwjgWmMRnxco53QoivygnCMg7\"}"} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8c11579c-3a31-41c7-aa12-6179e9054164","keyName":"e2e-rate-a-fa0cc1","subscription":"e2e-rate-iso-a-fa0cc1","tenant":"e2e-shared-a-3d4103","userId":"8c11579c-3a31-41c7-aa12-6179e9054164","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\",\"requestedSubscription\":\"e2e-rate-iso-a-fa0cc1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3d4103","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa0cc1","namespace":"ai-tenant-e2e-shared-a-3d4103","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fa0cc1"} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8c11579c-3a31-41c7-aa12-6179e9054164","keyName":"e2e-rate-a-fa0cc1","selected_subscription":"e2e-rate-iso-a-fa0cc1","selected_subscription_key":"ai-tenant-e2e-shared-a-3d4103/e2e-rate-iso-a-fa0cc1@ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3d4103","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fa0cc1","namespace":"ai-tenant-e2e-shared-a-3d4103","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:37:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3649fd18-214d-4a05-beb5-8f1b0d12f011","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40784","PortSpecifier":{"PortValue":40784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40784","PortSpecifier":{"PortValue":40784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309866,"nanos":674014257},"http":{"id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52fd9ad2-e847-4cbc-b7d3-2b6b321b8603","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39932","PortSpecifier":{"PortValue":39932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39932","PortSpecifier":{"PortValue":39932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309866,"nanos":711585937},"http":{"id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","method":"POST","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"]}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91544df274f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=95962f9c-16ef-4e4a-8160-561d98cb37b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6bd8860e-dc35-4999-96d0-ce2f2edd1cc9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f5e7b/rate-test-model-4f5e7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f5e7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6649e9ab-7918-49e8-93cd-f2c1c944f09d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40794","PortSpecifier":{"PortValue":40794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","method":"POST","path":"/ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103/v1/completions","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40794","PortSpecifier":{"PortValue":40794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309866,"nanos":746910271},"http":{"id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cqhpl5ExM1Lc2vWJ_qGjvI845nFK2VaL0DZD5sjhVnNivoBbgXdI9TJi0Xo4"} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cqhpl5ExM1Lc2vWJ_qGjvI845nFK2VaL0DZD5sjhVnNivoBbgXdI9TJi0Xo4\"}"} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"82077320-a19b-4f08-8a4d-867fe9c86e90","keyName":"e2e-rate-a-139ccf","subscription":"e2e-rate-iso-a-139ccf","tenant":"e2e-shared-a-3d4103","userId":"82077320-a19b-4f08-8a4d-867fe9c86e90","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\",\"requestedSubscription\":\"e2e-rate-iso-a-139ccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3d4103","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-139ccf","namespace":"ai-tenant-e2e-shared-a-3d4103","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-139ccf"} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"82077320-a19b-4f08-8a4d-867fe9c86e90","keyName":"e2e-rate-a-139ccf","selected_subscription":"e2e-rate-iso-a-139ccf","selected_subscription_key":"ai-tenant-e2e-shared-a-3d4103/e2e-rate-iso-a-139ccf@ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3d4103","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-139ccf","namespace":"ai-tenant-e2e-shared-a-3d4103","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c317db1-c998-4fe4-8e3a-92ffbdc9e1d7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db00763f-514f-4571-81b8-6c2809a3063f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40800","PortSpecifier":{"PortValue":40800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db00763f-514f-4571-81b8-6c2809a3063f","method":"POST","path":"/ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103/v1/completions","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db00763f-514f-4571-81b8-6c2809a3063f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40800","PortSpecifier":{"PortValue":40800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309867,"nanos":783370743},"http":{"id":"db00763f-514f-4571-81b8-6c2809a3063f","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db00763f-514f-4571-81b8-6c2809a3063f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cqhpl5ExM1Lc2vWJ_qGjvI845nFK2VaL0DZD5sjhVnNivoBbgXdI9TJi0Xo4"} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db00763f-514f-4571-81b8-6c2809a3063f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cqhpl5ExM1Lc2vWJ_qGjvI845nFK2VaL0DZD5sjhVnNivoBbgXdI9TJi0Xo4\"}"} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db00763f-514f-4571-81b8-6c2809a3063f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"82077320-a19b-4f08-8a4d-867fe9c86e90","keyName":"e2e-rate-a-139ccf","subscription":"e2e-rate-iso-a-139ccf","tenant":"e2e-shared-a-3d4103","userId":"82077320-a19b-4f08-8a4d-867fe9c86e90","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db00763f-514f-4571-81b8-6c2809a3063f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\",\"requestedSubscription\":\"e2e-rate-iso-a-139ccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db00763f-514f-4571-81b8-6c2809a3063f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3d4103","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-139ccf","namespace":"ai-tenant-e2e-shared-a-3d4103","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db00763f-514f-4571-81b8-6c2809a3063f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db00763f-514f-4571-81b8-6c2809a3063f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db00763f-514f-4571-81b8-6c2809a3063f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db00763f-514f-4571-81b8-6c2809a3063f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db00763f-514f-4571-81b8-6c2809a3063f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db00763f-514f-4571-81b8-6c2809a3063f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db00763f-514f-4571-81b8-6c2809a3063f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-139ccf"} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db00763f-514f-4571-81b8-6c2809a3063f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db00763f-514f-4571-81b8-6c2809a3063f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"82077320-a19b-4f08-8a4d-867fe9c86e90","keyName":"e2e-rate-a-139ccf","selected_subscription":"e2e-rate-iso-a-139ccf","selected_subscription_key":"ai-tenant-e2e-shared-a-3d4103/e2e-rate-iso-a-139ccf@ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3d4103","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-139ccf","namespace":"ai-tenant-e2e-shared-a-3d4103","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db00763f-514f-4571-81b8-6c2809a3063f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:37:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db00763f-514f-4571-81b8-6c2809a3063f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40816","PortSpecifier":{"PortValue":40816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31341e48-178f-489b-b6ec-1e0067623d8b","method":"POST","path":"/ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103/v1/completions","host":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:40816","PortSpecifier":{"PortValue":40816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309868,"nanos":816220077},"http":{"id":"31341e48-178f-489b-b6ec-1e0067623d8b","method":"POST","headers":{":authority":"e2e-shared-a-3d4103.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cqhpl5ExM1Lc2vWJ_qGjvI845nFK2VaL0DZD5sjhVnNivoBbgXdI9TJi0Xo4"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cqhpl5ExM1Lc2vWJ_qGjvI845nFK2VaL0DZD5sjhVnNivoBbgXdI9TJi0Xo4\"}"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"82077320-a19b-4f08-8a4d-867fe9c86e90","keyName":"e2e-rate-a-139ccf","subscription":"e2e-rate-iso-a-139ccf","tenant":"e2e-shared-a-3d4103","userId":"82077320-a19b-4f08-8a4d-867fe9c86e90","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\",\"requestedSubscription\":\"e2e-rate-iso-a-139ccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3d4103.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3d4103","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-139ccf","namespace":"ai-tenant-e2e-shared-a-3d4103","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3d4103/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-139ccf"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"82077320-a19b-4f08-8a4d-867fe9c86e90","keyName":"e2e-rate-a-139ccf","selected_subscription":"e2e-rate-iso-a-139ccf","selected_subscription_key":"ai-tenant-e2e-shared-a-3d4103/e2e-rate-iso-a-139ccf@ai-tenant-e2e-shared-a-3d4103/rate-test-model-3d4103","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3d4103","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-139ccf","namespace":"ai-tenant-e2e-shared-a-3d4103","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31341e48-178f-489b-b6ec-1e0067623d8b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39938","PortSpecifier":{"PortValue":39938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"014079db-d8cb-4a61-bd42-29b084f12d54","method":"POST","path":"/ai-tenant-e2e-shared-b-4f5e7b/rate-test-model-4f5e7b/v1/completions","host":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39938","PortSpecifier":{"PortValue":39938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784309868,"nanos":851099397},"http":{"id":"014079db-d8cb-4a61-bd42-29b084f12d54","method":"POST","headers":{":authority":"e2e-shared-b-4f5e7b.apps.79997fa9-6508-4f16-8932-91544df274f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-4f5e7b/rate-test-model-4f5e7b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DXFDxkxymN6xJhQI_wzM26MPdCK7z0Ici8g6QWQeqC60SrqR1GLPxl0YC4dp"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4f5e7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DXFDxkxymN6xJhQI_wzM26MPdCK7z0Ici8g6QWQeqC60SrqR1GLPxl0YC4dp\"}"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4f5e7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9f105315-bd62-4f29-b131-a815698f2954","keyName":"e2e-rate-b-139ccf","subscription":"e2e-rate-iso-b-139ccf","tenant":"e2e-shared-b-4f5e7b","userId":"9f105315-bd62-4f29-b131-a815698f2954","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-4f5e7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-4f5e7b/rate-test-model-4f5e7b\",\"requestedSubscription\":\"e2e-rate-iso-b-139ccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4f5e7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4f5e7b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-139ccf","namespace":"ai-tenant-e2e-shared-b-4f5e7b","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f5e7b/rate-test-model-4f5e7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f5e7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-139ccf"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9f105315-bd62-4f29-b131-a815698f2954","keyName":"e2e-rate-b-139ccf","selected_subscription":"e2e-rate-iso-b-139ccf","selected_subscription_key":"ai-tenant-e2e-shared-b-4f5e7b/e2e-rate-iso-b-139ccf@ai-tenant-e2e-shared-b-4f5e7b/rate-test-model-4f5e7b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4f5e7b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-139ccf","namespace":"ai-tenant-e2e-shared-b-4f5e7b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T17:37:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"014079db-d8cb-4a61-bd42-29b084f12d54","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T17:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/636e67c7a5f8428cca8099e820f7228f9aeb6d6a24caeba1b0c4712bc70e7368"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eed2a3718a5712a0e7860ef1a73c4af51c860f81c69760d99db86b8110f3c9b"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1666ef04e4b29cf583c2403d1c2858adc399b4b4114c03caa7943895fb606c45"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2beb6625ec1c26d0b950e2fc000dc27f91964dcbf30b2f7b211a880c5f13d4df"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a24b0455333db65eb23feb829536b0058dcc25d8910cb4af14e8978d940a4c57"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/592c0824c623823274dda219186b349cebaca7345692f7168ff71cdfafb07f9a"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da44abf6f0c5edcbe011e28f7e4143df2e10c232bc8dfa02bb9df985aea9dbba"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e8072a2f620b062884f60ffe878ccdb7449db1a86ba5fca5ae46bf7fa811b7e"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c926e2c14dddda9cff6fc9bd4208d1e82e31db1cace172b779c33c2e8c0aef8b"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00d3c728b17783f6e4f46fce9501704ccbd72663c73e2ad6153a20a4459a3c61"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6a3833ff2bc1958f55e47855cc7f2ceb1bc95854a8bb3ea971485a394230598"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62bd34ea9eaf104bf500bd957c7606ac53022a6a9af3cfca21bfa0aea4a1e424"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17b53041c4fe8dac95d2f61b4194d00690bebc549d995262a4cf6490589e1d1a"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/982cbcb05971be88a8e5b6865c6c28202a9ec9a371569ea28996f2467249b0e4"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c13b3b7eb285256feff751c6555743205fe83770b106d2930896e107e14d7222"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98efee166bbf89d683dbcd5561d82a702aecb8513a80c82bcdc810f3c655a68b"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36e86753ba67c471e27e8f043afc6bae837fc0f68a3163bffce886b639d26f9c"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36b367f8f9aba3dadb423df14b1be896b34ea847ddf6a645b3890c7772703287"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b5fbcaf417fa9393ef1b5a5faa964a831779e6cbb4ba4a9cb856f95450a3f5f"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/548762977c39aa9689d725e642f89c4478f8e2e8d4cd929110ac2444d16b84e8"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5319a12f76038b94bec4f8a214e2d03b299e979904171482864535851919c672"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b33dec13b1edf34f1c365596b0146ab092363aa38dba401a02901ac4b5f03274"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82a5d923389dc0a801e1885a2b903f019168eb9b7595c786545b19b05cd549f1"} {"level":"info","ts":"2026-07-17T17:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e33bc7ad1c3d0a49053bc3c7d95f52a3668287821d40567c6235766d18545fc"}