--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-24T20:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"debug","ts":"2026-07-24T20:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afdef893-1586-4ce7-899e-c866c7532fa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43354","PortSpecifier":{"PortValue":43354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afdef893-1586-4ce7-899e-c866c7532fa4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afdef893-1586-4ce7-899e-c866c7532fa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43354","PortSpecifier":{"PortValue":43354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924117,"nanos":499676733},"http":{"id":"afdef893-1586-4ce7-899e-c866c7532fa4","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"afdef893-1586-4ce7-899e-c866c7532fa4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afdef893-1586-4ce7-899e-c866c7532fa4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afdef893-1586-4ce7-899e-c866c7532fa4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afdef893-1586-4ce7-899e-c866c7532fa4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afdef893-1586-4ce7-899e-c866c7532fa4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afdef893-1586-4ce7-899e-c866c7532fa4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/auth-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afdef893-1586-4ce7-899e-c866c7532fa4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afdef893-1586-4ce7-899e-c866c7532fa4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afdef893-1586-4ce7-899e-c866c7532fa4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afdef893-1586-4ce7-899e-c866c7532fa4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afdef893-1586-4ce7-899e-c866c7532fa4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33500","PortSpecifier":{"PortValue":33500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33500","PortSpecifier":{"PortValue":33500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924117,"nanos":536411959},"http":{"id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/auth-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db684f5c-4a8a-4cf1-aa99-154c3d60039c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86e34b3a-fb08-4eb4-b4c8-43087b2f5ff2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33506","PortSpecifier":{"PortValue":33506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86e34b3a-fb08-4eb4-b4c8-43087b2f5ff2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86e34b3a-fb08-4eb4-b4c8-43087b2f5ff2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33506","PortSpecifier":{"PortValue":33506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924117,"nanos":578482124},"http":{"id":"86e34b3a-fb08-4eb4-b4c8-43087b2f5ff2","method":"GET","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86e34b3a-fb08-4eb4-b4c8-43087b2f5ff2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1S7IkRp9JijmE57oV_im03GWEnhykmw67oNtNHReu6rfpoYEttfUICZqoCY9y"} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86e34b3a-fb08-4eb4-b4c8-43087b2f5ff2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1S7IkRp9JijmE57oV_im03GWEnhykmw67oNtNHReu6rfpoYEttfUICZqoCY9y\"}"} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86e34b3a-fb08-4eb4-b4c8-43087b2f5ff2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86e34b3a-fb08-4eb4-b4c8-43087b2f5ff2","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"86e34b3a-fb08-4eb4-b4c8-43087b2f5ff2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86e34b3a-fb08-4eb4-b4c8-43087b2f5ff2","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-24T20:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86e34b3a-fb08-4eb4-b4c8-43087b2f5ff2","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-24T20:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"} {"level":"info","ts":"2026-07-24T20:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"info","ts":"2026-07-24T20:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"info","ts":"2026-07-24T20:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"} {"level":"info","ts":"2026-07-24T20:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"} {"level":"info","ts":"2026-07-24T20:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:15:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:15:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"info","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35972","PortSpecifier":{"PortValue":35972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35972","PortSpecifier":{"PortValue":35972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924136,"nanos":727526117},"http":{"id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/auth-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dde024e-04cd-42a1-9aa0-6885cdddc4f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43456","PortSpecifier":{"PortValue":43456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43456","PortSpecifier":{"PortValue":43456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924136,"nanos":765396296},"http":{"id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/auth-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39e0204e-7c1b-44bb-8688-c109d8a9e6e5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35980","PortSpecifier":{"PortValue":35980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35980","PortSpecifier":{"PortValue":35980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924136,"nanos":804210747},"http":{"id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/auth-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf3025d9-4c8c-418b-bfa0-77e3258b7c40","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43460","PortSpecifier":{"PortValue":43460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43460","PortSpecifier":{"PortValue":43460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924136,"nanos":844432194},"http":{"id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/auth-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"542fa203-c666-40d6-bc72-18fbf6f6ca6b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"info","ts":"2026-07-24T20:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"} {"level":"info","ts":"2026-07-24T20:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"} {"level":"info","ts":"2026-07-24T20:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"info","ts":"2026-07-24T20:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"} {"level":"info","ts":"2026-07-24T20:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"info","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"info","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"error","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"debug","ts":"2026-07-24T20:15:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:15:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:15:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:15:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:15:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:15:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:15:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57210","PortSpecifier":{"PortValue":57210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57210","PortSpecifier":{"PortValue":57210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924156,"nanos":56803479},"http":{"id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/auth-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc56c70a-9345-4e34-bfd7-54bdea9a2c4a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56208","PortSpecifier":{"PortValue":56208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56208","PortSpecifier":{"PortValue":56208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924156,"nanos":94949757},"http":{"id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/auth-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25f836b0-e0b1-41b2-b3df-9aa99216bc10","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56210","PortSpecifier":{"PortValue":56210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","method":"GET","path":"/maas-api/v1/api-keys/d0b98804-4583-483a-b3f5-4e1be0f192e0","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56210","PortSpecifier":{"PortValue":56210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924156,"nanos":140033208},"http":{"id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","method":"GET","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d0b98804-4583-483a-b3f5-4e1be0f192e0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d0b98804-4583-483a-b3f5-4e1be0f192e0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/auth-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eec1f892-a0da-4143-bad8-a2c0b3b11646","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57214","PortSpecifier":{"PortValue":57214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","method":"GET","path":"/maas-api/v1/api-keys/d0b98804-4583-483a-b3f5-4e1be0f192e0","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57214","PortSpecifier":{"PortValue":57214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924156,"nanos":173048812},"http":{"id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","method":"GET","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d0b98804-4583-483a-b3f5-4e1be0f192e0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d0b98804-4583-483a-b3f5-4e1be0f192e0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/auth-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:15:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2894c7e3-39c1-4257-89a9-a78563b1ed45","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"} {"level":"info","ts":"2026-07-24T20:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"} {"level":"info","ts":"2026-07-24T20:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"} {"level":"info","ts":"2026-07-24T20:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"info","ts":"2026-07-24T20:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"info","ts":"2026-07-24T20:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"error","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:16:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"error","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39596","PortSpecifier":{"PortValue":39596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39596","PortSpecifier":{"PortValue":39596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924171,"nanos":141477030},"http":{"id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/auth-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6dc0962-138d-4785-b7b8-d954f72d23fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"399371c3-ba21-4000-bc7b-5042f8055d14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35230","PortSpecifier":{"PortValue":35230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"399371c3-ba21-4000-bc7b-5042f8055d14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"399371c3-ba21-4000-bc7b-5042f8055d14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35230","PortSpecifier":{"PortValue":35230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924171,"nanos":182453431},"http":{"id":"399371c3-ba21-4000-bc7b-5042f8055d14","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"399371c3-ba21-4000-bc7b-5042f8055d14","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"399371c3-ba21-4000-bc7b-5042f8055d14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"399371c3-ba21-4000-bc7b-5042f8055d14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"399371c3-ba21-4000-bc7b-5042f8055d14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"399371c3-ba21-4000-bc7b-5042f8055d14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"399371c3-ba21-4000-bc7b-5042f8055d14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/auth-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"399371c3-ba21-4000-bc7b-5042f8055d14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"399371c3-ba21-4000-bc7b-5042f8055d14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"399371c3-ba21-4000-bc7b-5042f8055d14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"399371c3-ba21-4000-bc7b-5042f8055d14","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"399371c3-ba21-4000-bc7b-5042f8055d14","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39598","PortSpecifier":{"PortValue":39598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39598","PortSpecifier":{"PortValue":39598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924171,"nanos":222421485},"http":{"id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KMJwrbCZp6tbz0W7_YhVLBxRKZE1kCDFEzuHvFoi0mjnHjHLbU7IkpmsqhSC"} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KMJwrbCZp6tbz0W7_YhVLBxRKZE1kCDFEzuHvFoi0mjnHjHLbU7IkpmsqhSC\"}"} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0603b861-6326-4234-8b00-aaa07f0e6973","keyName":"e2e-auth-iso-a-5c0177","subscription":"e2e-auth-iso-cdfcbc","tenant":"e2e-shared-a-53d0a0","userId":"0603b861-6326-4234-8b00-aaa07f0e6973","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/auth-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-cdfcbc"} {"level":"info","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:16:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0a09c4c-6cb6-4622-b5c1-82e4f7168b75","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f90f9c9eb089c18e6007ce36c44ad7cbb8d070a8bbce783a2dac64e799229789"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb045c30b2f182908e4ca2f749cfead06b463d9580a9e10101ded3c544bfed2a"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/544643ef972ae11c84ccf65e8be186f1495ef30ae5ebf92f71406edc9f235d4d"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fd4cd2916aae3e54bd69c398481db199f9c19790dc0c9a6c796230736aa6938"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4271cbb36ce77cebf1d1a4966f993894769f7302df436950865545158e6e7c2c"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faa256192e00473e42f280125734c34c3f66d106e3fd092c20631f7abad7ac16"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49864cd46b17719496d36f8f4c6ac77e44d679f0437691a4c5dbc988ae9e8cf1"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/febbbb55a33cdf755b4e43e428f443109f25cca120b411374ac9994706f0de35"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e37300cad1a60abb59db5293245004058251f4843afd4abfaa6e3f97afa3fa6"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9ec0f0271acaa9ff4cca75fb1eddfa7d0cd67963760509010b33b5234fa6034"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3a8b745361a44439713eab41f4813e4b1bb8548292e2a6df9caa629a8bf52a6"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4be71a75af5eb120836f9a7ab0601b1745dc3a0fd40796fa7b5cfef07bf2e626"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47caf6d77688e48d7b74aa9c3930c80e205ab46f68a7276ccf1ee30d33399460"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e19e12e41c6863d09baa8395d4a1c49e49618b89601a808945d45c19b9aacb00"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2d1550c51eaca654fd37f0655e82cfc66cab140921f09bf7d11050e6c14f14f"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"} {"level":"info","ts":"2026-07-24T20:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69e407df52c77514ba92f272699e81a5ed32e6d304b31eff48f01fc9abd3bb5c"} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"328dded23dd850d88fd5cbd724b23761e08c6d288c0f03b7e65c289d2feb0ad1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"328dded23dd850d88fd5cbd724b23761e08c6d288c0f03b7e65c289d2feb0ad1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/328dded23dd850d88fd5cbd724b23761e08c6d288c0f03b7e65c289d2feb0ad1"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"328dded23dd850d88fd5cbd724b23761e08c6d288c0f03b7e65c289d2feb0ad1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"328dded23dd850d88fd5cbd724b23761e08c6d288c0f03b7e65c289d2feb0ad1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/328dded23dd850d88fd5cbd724b23761e08c6d288c0f03b7e65c289d2feb0ad1"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"328dded23dd850d88fd5cbd724b23761e08c6d288c0f03b7e65c289d2feb0ad1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["328dded23dd850d88fd5cbd724b23761e08c6d288c0f03b7e65c289d2feb0ad1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"328dded23dd850d88fd5cbd724b23761e08c6d288c0f03b7e65c289d2feb0ad1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"328dded23dd850d88fd5cbd724b23761e08c6d288c0f03b7e65c289d2feb0ad1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/328dded23dd850d88fd5cbd724b23761e08c6d288c0f03b7e65c289d2feb0ad1"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e1971322151c051ebd8936ff04c880b43a7906f237fcf1b019412cd670c1fa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e1971322151c051ebd8936ff04c880b43a7906f237fcf1b019412cd670c1fa8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e1971322151c051ebd8936ff04c880b43a7906f237fcf1b019412cd670c1fa8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e1971322151c051ebd8936ff04c880b43a7906f237fcf1b019412cd670c1fa8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e1971322151c051ebd8936ff04c880b43a7906f237fcf1b019412cd670c1fa8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1971322151c051ebd8936ff04c880b43a7906f237fcf1b019412cd670c1fa8"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e1971322151c051ebd8936ff04c880b43a7906f237fcf1b019412cd670c1fa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e1971322151c051ebd8936ff04c880b43a7906f237fcf1b019412cd670c1fa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e1971322151c051ebd8936ff04c880b43a7906f237fcf1b019412cd670c1fa8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e1971322151c051ebd8936ff04c880b43a7906f237fcf1b019412cd670c1fa8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1971322151c051ebd8936ff04c880b43a7906f237fcf1b019412cd670c1fa8"} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a13a5791d697f0dcd8411f8d27469ca6185c6c96af83498fea5c251348e46a05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a13a5791d697f0dcd8411f8d27469ca6185c6c96af83498fea5c251348e46a05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a13a5791d697f0dcd8411f8d27469ca6185c6c96af83498fea5c251348e46a05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a13a5791d697f0dcd8411f8d27469ca6185c6c96af83498fea5c251348e46a05"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a13a5791d697f0dcd8411f8d27469ca6185c6c96af83498fea5c251348e46a05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a13a5791d697f0dcd8411f8d27469ca6185c6c96af83498fea5c251348e46a05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a13a5791d697f0dcd8411f8d27469ca6185c6c96af83498fea5c251348e46a05"} {"level":"error","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a13a5791d697f0dcd8411f8d27469ca6185c6c96af83498fea5c251348e46a05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a13a5791d697f0dcd8411f8d27469ca6185c6c96af83498fea5c251348e46a05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a13a5791d697f0dcd8411f8d27469ca6185c6c96af83498fea5c251348e46a05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a13a5791d697f0dcd8411f8d27469ca6185c6c96af83498fea5c251348e46a05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a13a5791d697f0dcd8411f8d27469ca6185c6c96af83498fea5c251348e46a05"} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9822583f2fdb24b550a63d73507b9754d4e36f8795053bfd100ed21a70ca451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9822583f2fdb24b550a63d73507b9754d4e36f8795053bfd100ed21a70ca451","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9822583f2fdb24b550a63d73507b9754d4e36f8795053bfd100ed21a70ca451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9822583f2fdb24b550a63d73507b9754d4e36f8795053bfd100ed21a70ca451"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9822583f2fdb24b550a63d73507b9754d4e36f8795053bfd100ed21a70ca451","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9822583f2fdb24b550a63d73507b9754d4e36f8795053bfd100ed21a70ca451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9822583f2fdb24b550a63d73507b9754d4e36f8795053bfd100ed21a70ca451"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9822583f2fdb24b550a63d73507b9754d4e36f8795053bfd100ed21a70ca451","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4711d1f2ed8f6ef66e11e3c4f13a5a00ca39abce43b794585ea6da3b6a8439f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4711d1f2ed8f6ef66e11e3c4f13a5a00ca39abce43b794585ea6da3b6a8439f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9822583f2fdb24b550a63d73507b9754d4e36f8795053bfd100ed21a70ca451"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a57bca15f7dd816f293a9cc56f77a7cc66cac38a8439c66dcd11cc907eeb668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4711d1f2ed8f6ef66e11e3c4f13a5a00ca39abce43b794585ea6da3b6a8439f9"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a57bca15f7dd816f293a9cc56f77a7cc66cac38a8439c66dcd11cc907eeb668"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a57bca15f7dd816f293a9cc56f77a7cc66cac38a8439c66dcd11cc907eeb668","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9822583f2fdb24b550a63d73507b9754d4e36f8795053bfd100ed21a70ca451","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4711d1f2ed8f6ef66e11e3c4f13a5a00ca39abce43b794585ea6da3b6a8439f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4711d1f2ed8f6ef66e11e3c4f13a5a00ca39abce43b794585ea6da3b6a8439f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d7e165cf0707fc13d7947d65a8a23f2636a38c6bb32acabadad408c2662bd53"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f1fbdcb7f3fb89c0e365611dc3bb5d9fb760ee77765d4c8cb19e8365970e16"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a57bca15f7dd816f293a9cc56f77a7cc66cac38a8439c66dcd11cc907eeb668"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4711d1f2ed8f6ef66e11e3c4f13a5a00ca39abce43b794585ea6da3b6a8439f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42624aca085f1505189a8aa76eab6745d08339e9032dec70b2a6d6d479c67934"} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d7e165cf0707fc13d7947d65a8a23f2636a38c6bb32acabadad408c2662bd53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d7e165cf0707fc13d7947d65a8a23f2636a38c6bb32acabadad408c2662bd53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4711d1f2ed8f6ef66e11e3c4f13a5a00ca39abce43b794585ea6da3b6a8439f9"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408bb0f9fca46fe86b7f3d605acb630eaad9df53b2f33916e37ed1ee1f691d88"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d7e165cf0707fc13d7947d65a8a23f2636a38c6bb32acabadad408c2662bd53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f1fbdcb7f3fb89c0e365611dc3bb5d9fb760ee77765d4c8cb19e8365970e16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9f1fbdcb7f3fb89c0e365611dc3bb5d9fb760ee77765d4c8cb19e8365970e16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d7e165cf0707fc13d7947d65a8a23f2636a38c6bb32acabadad408c2662bd53"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f1fbdcb7f3fb89c0e365611dc3bb5d9fb760ee77765d4c8cb19e8365970e16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a57bca15f7dd816f293a9cc56f77a7cc66cac38a8439c66dcd11cc907eeb668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a57bca15f7dd816f293a9cc56f77a7cc66cac38a8439c66dcd11cc907eeb668"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a57bca15f7dd816f293a9cc56f77a7cc66cac38a8439c66dcd11cc907eeb668","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42624aca085f1505189a8aa76eab6745d08339e9032dec70b2a6d6d479c67934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42624aca085f1505189a8aa76eab6745d08339e9032dec70b2a6d6d479c67934"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea627099f247919e02f492213a87f1f81b926de888ce9ef8d60691e753925adf"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42624aca085f1505189a8aa76eab6745d08339e9032dec70b2a6d6d479c67934","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4711d1f2ed8f6ef66e11e3c4f13a5a00ca39abce43b794585ea6da3b6a8439f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408bb0f9fca46fe86b7f3d605acb630eaad9df53b2f33916e37ed1ee1f691d88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["408bb0f9fca46fe86b7f3d605acb630eaad9df53b2f33916e37ed1ee1f691d88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f1fbdcb7f3fb89c0e365611dc3bb5d9fb760ee77765d4c8cb19e8365970e16"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a57bca15f7dd816f293a9cc56f77a7cc66cac38a8439c66dcd11cc907eeb668"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408bb0f9fca46fe86b7f3d605acb630eaad9df53b2f33916e37ed1ee1f691d88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d7e165cf0707fc13d7947d65a8a23f2636a38c6bb32acabadad408c2662bd53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea627099f247919e02f492213a87f1f81b926de888ce9ef8d60691e753925adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea627099f247919e02f492213a87f1f81b926de888ce9ef8d60691e753925adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42624aca085f1505189a8aa76eab6745d08339e9032dec70b2a6d6d479c67934"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea627099f247919e02f492213a87f1f81b926de888ce9ef8d60691e753925adf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f1fbdcb7f3fb89c0e365611dc3bb5d9fb760ee77765d4c8cb19e8365970e16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408bb0f9fca46fe86b7f3d605acb630eaad9df53b2f33916e37ed1ee1f691d88"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea627099f247919e02f492213a87f1f81b926de888ce9ef8d60691e753925adf"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a57bca15f7dd816f293a9cc56f77a7cc66cac38a8439c66dcd11cc907eeb668","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42624aca085f1505189a8aa76eab6745d08339e9032dec70b2a6d6d479c67934","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da"} {"level":"info","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408bb0f9fca46fe86b7f3d605acb630eaad9df53b2f33916e37ed1ee1f691d88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea627099f247919e02f492213a87f1f81b926de888ce9ef8d60691e753925adf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:17:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e"} {"level":"info","ts":"2026-07-24T20:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e"} {"level":"info","ts":"2026-07-24T20:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:17:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:17:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e"} {"level":"error","ts":"2026-07-24T20:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:17:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35614","PortSpecifier":{"PortValue":35614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35614","PortSpecifier":{"PortValue":35614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924250,"nanos":463641242},"http":{"id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/sub-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"494fac04-af11-44ca-a0a9-d00a0dc20d4d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60118","PortSpecifier":{"PortValue":60118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60118","PortSpecifier":{"PortValue":60118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924250,"nanos":504086563},"http":{"id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/sub-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f3d5098-a434-4d22-aa0d-10da140c10ce","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35616","PortSpecifier":{"PortValue":35616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0da59b48-3d47-4be7-a7b4-745cb1798746","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35616","PortSpecifier":{"PortValue":35616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924250,"nanos":548057571},"http":{"id":"0da59b48-3d47-4be7-a7b4-745cb1798746","method":"GET","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sZPQbVIigwR0mrQ2_cKv4eGdbWFcHKyQLZe2TUiT3tnpb6iZjOfm7lQOlfcH"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sZPQbVIigwR0mrQ2_cKv4eGdbWFcHKyQLZe2TUiT3tnpb6iZjOfm7lQOlfcH\"}"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3ba07d9-4a98-41f4-8153-4a472edefd99","keyName":"e2e-sub-iso-984272","subscription":"e2e-a-only-febe94","tenant":"e2e-shared-a-53d0a0","userId":"d3ba07d9-4a98-41f4-8153-4a472edefd99","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/sub-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-febe94"} {"level":"info","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0da59b48-3d47-4be7-a7b4-745cb1798746","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60126","PortSpecifier":{"PortValue":60126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60126","PortSpecifier":{"PortValue":60126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924250,"nanos":589523494},"http":{"id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","method":"GET","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ENdym1Dzb0YBJkpY_ClUBnpAWmLJyxTvu5G3wpxRO5DMl29E91h8snF1nnXZ"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ENdym1Dzb0YBJkpY_ClUBnpAWmLJyxTvu5G3wpxRO5DMl29E91h8snF1nnXZ\"}"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b0f9063-baed-4e1b-87e2-9a7241729329","keyName":"e2e-sub-iso-b488e3","subscription":"e2e-b-only-febe94","tenant":"e2e-shared-b-3f5fc9","userId":"7b0f9063-baed-4e1b-87e2-9a7241729329","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/sub-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-febe94"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10b51eba-eb47-4a70-bb32-41a7b05b40c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56234","PortSpecifier":{"PortValue":56234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56234","PortSpecifier":{"PortValue":56234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924262,"nanos":607087945},"http":{"id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/sub-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ee339c0-066b-4ed1-ac33-0ccf8d67f83e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43840","PortSpecifier":{"PortValue":43840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43840","PortSpecifier":{"PortValue":43840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924262,"nanos":646997144},"http":{"id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/sub-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09b781cd-f0a9-4060-abd0-9b2df5f509b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56244","PortSpecifier":{"PortValue":56244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b38674e-f374-4158-87d4-7a37a98caba9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56244","PortSpecifier":{"PortValue":56244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924262,"nanos":690603990},"http":{"id":"4b38674e-f374-4158-87d4-7a37a98caba9","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nhG8ClcOnHJPmsbR_WOHN791ertFhLUNo6QVjPLQ8Z6fZ2wJwNyoqaDdSEIi"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nhG8ClcOnHJPmsbR_WOHN791ertFhLUNo6QVjPLQ8Z6fZ2wJwNyoqaDdSEIi\"}"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5f6a5903-4311-4a05-9e0b-2614c6e03953","keyName":"e2e-sub-iso-660026","subscription":"e2e-shared-sub-a606e2","tenant":"e2e-shared-a-53d0a0","userId":"5f6a5903-4311-4a05-9e0b-2614c6e03953","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/sub-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a606e2"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b38674e-f374-4158-87d4-7a37a98caba9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43854","PortSpecifier":{"PortValue":43854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15536fec-6785-461b-9e9a-0f2f6901c966","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43854","PortSpecifier":{"PortValue":43854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924262,"nanos":718792012},"http":{"id":"15536fec-6785-461b-9e9a-0f2f6901c966","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Pz6QG2UXJjBUUxwP_RurU9OFS41TASrGJjnaDZbo1G2eqffppoXyD88N4blQ"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Pz6QG2UXJjBUUxwP_RurU9OFS41TASrGJjnaDZbo1G2eqffppoXyD88N4blQ\"}"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"941327a7-b5c9-4017-9940-d0a42197ba7a","keyName":"e2e-sub-iso-2a14a9","subscription":"e2e-shared-sub-a606e2","tenant":"e2e-shared-b-3f5fc9","userId":"941327a7-b5c9-4017-9940-d0a42197ba7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/sub-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a606e2"} {"level":"info","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15536fec-6785-461b-9e9a-0f2f6901c966","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd576bbf69116e3bd83a92f488964ba511badf610418a9a86cf6438c95468b7e"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3cdc2203b186b6ca2044667879ec27ea726c5b3e06778d6f6c25120622cf601"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9e67d199520780c76c222c9f0494eda2f75919a003f76eb5f00dc6d542315b4"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d7e165cf0707fc13d7947d65a8a23f2636a38c6bb32acabadad408c2662bd53"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9822583f2fdb24b550a63d73507b9754d4e36f8795053bfd100ed21a70ca451"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a57bca15f7dd816f293a9cc56f77a7cc66cac38a8439c66dcd11cc907eeb668"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42624aca085f1505189a8aa76eab6745d08339e9032dec70b2a6d6d479c67934"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a79a627df86dc2fa64ec90418627019753c2f14f438a6ba5710a22cecf4a6f9b"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/408bb0f9fca46fe86b7f3d605acb630eaad9df53b2f33916e37ed1ee1f691d88"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee3dc3bb8d43227da235a28d1c82743771ea4ac5990b3d1dd97048180c3c00a6"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4711d1f2ed8f6ef66e11e3c4f13a5a00ca39abce43b794585ea6da3b6a8439f9"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9f1fbdcb7f3fb89c0e365611dc3bb5d9fb760ee77765d4c8cb19e8365970e16"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e1971322151c051ebd8936ff04c880b43a7906f237fcf1b019412cd670c1fa8"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a13a5791d697f0dcd8411f8d27469ca6185c6c96af83498fea5c251348e46a05"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea627099f247919e02f492213a87f1f81b926de888ce9ef8d60691e753925adf"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/328dded23dd850d88fd5cbd724b23761e08c6d288c0f03b7e65c289d2feb0ad1"} {"level":"info","ts":"2026-07-24T20:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"} {"level":"debug","ts":"2026-07-24T20:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"debug","ts":"2026-07-24T20:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"debug","ts":"2026-07-24T20:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ca4072ade7f0d6e53280a4bcab690ed94471afd868f5e89aa05a03976ecd54a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ca4072ade7f0d6e53280a4bcab690ed94471afd868f5e89aa05a03976ecd54a"} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ca4072ade7f0d6e53280a4bcab690ed94471afd868f5e89aa05a03976ecd54a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ca4072ade7f0d6e53280a4bcab690ed94471afd868f5e89aa05a03976ecd54a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ca4072ade7f0d6e53280a4bcab690ed94471afd868f5e89aa05a03976ecd54a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ca4072ade7f0d6e53280a4bcab690ed94471afd868f5e89aa05a03976ecd54a"} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ca4072ade7f0d6e53280a4bcab690ed94471afd868f5e89aa05a03976ecd54a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ca4072ade7f0d6e53280a4bcab690ed94471afd868f5e89aa05a03976ecd54a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ca4072ade7f0d6e53280a4bcab690ed94471afd868f5e89aa05a03976ecd54a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ca4072ade7f0d6e53280a4bcab690ed94471afd868f5e89aa05a03976ecd54a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ca4072ade7f0d6e53280a4bcab690ed94471afd868f5e89aa05a03976ecd54a"} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a"} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a"} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a"} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70dc6222cd324628bfb24237b1835a4aefe2cdc62cf59af7b62ea09569c118a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70dc6222cd324628bfb24237b1835a4aefe2cdc62cf59af7b62ea09569c118a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70dc6222cd324628bfb24237b1835a4aefe2cdc62cf59af7b62ea09569c118a5"} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70dc6222cd324628bfb24237b1835a4aefe2cdc62cf59af7b62ea09569c118a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70dc6222cd324628bfb24237b1835a4aefe2cdc62cf59af7b62ea09569c118a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70dc6222cd324628bfb24237b1835a4aefe2cdc62cf59af7b62ea09569c118a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70dc6222cd324628bfb24237b1835a4aefe2cdc62cf59af7b62ea09569c118a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a"} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70dc6222cd324628bfb24237b1835a4aefe2cdc62cf59af7b62ea09569c118a5"} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a"} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d"} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d"} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d"} {"level":"info","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabfc19c58915dd8790d952b5cf981f3f6718cee35753518e7f408459352f1cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabfc19c58915dd8790d952b5cf981f3f6718cee35753518e7f408459352f1cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabfc19c58915dd8790d952b5cf981f3f6718cee35753518e7f408459352f1cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabfc19c58915dd8790d952b5cf981f3f6718cee35753518e7f408459352f1cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabfc19c58915dd8790d952b5cf981f3f6718cee35753518e7f408459352f1cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabfc19c58915dd8790d952b5cf981f3f6718cee35753518e7f408459352f1cf"} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabfc19c58915dd8790d952b5cf981f3f6718cee35753518e7f408459352f1cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cabfc19c58915dd8790d952b5cf981f3f6718cee35753518e7f408459352f1cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabfc19c58915dd8790d952b5cf981f3f6718cee35753518e7f408459352f1cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabfc19c58915dd8790d952b5cf981f3f6718cee35753518e7f408459352f1cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabfc19c58915dd8790d952b5cf981f3f6718cee35753518e7f408459352f1cf"} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d8e95ad4eae8d4bc0657d7334e568d9d3d6cf030ba81c574885545cb3c0321a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d8e95ad4eae8d4bc0657d7334e568d9d3d6cf030ba81c574885545cb3c0321a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d8e95ad4eae8d4bc0657d7334e568d9d3d6cf030ba81c574885545cb3c0321a"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d8e95ad4eae8d4bc0657d7334e568d9d3d6cf030ba81c574885545cb3c0321a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d8e95ad4eae8d4bc0657d7334e568d9d3d6cf030ba81c574885545cb3c0321a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d8e95ad4eae8d4bc0657d7334e568d9d3d6cf030ba81c574885545cb3c0321a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d8e95ad4eae8d4bc0657d7334e568d9d3d6cf030ba81c574885545cb3c0321a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d8e95ad4eae8d4bc0657d7334e568d9d3d6cf030ba81c574885545cb3c0321a"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da"} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51babc4fd382198538885860f0ecd611e19ef209400ddf1f8ffdec8ba853c01f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51babc4fd382198538885860f0ecd611e19ef209400ddf1f8ffdec8ba853c01f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e97208d1bed487e8824b652fad5033caed8842e60ae6afca0a84ec01a2e1b3b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e97208d1bed487e8824b652fad5033caed8842e60ae6afca0a84ec01a2e1b3b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51babc4fd382198538885860f0ecd611e19ef209400ddf1f8ffdec8ba853c01f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51babc4fd382198538885860f0ecd611e19ef209400ddf1f8ffdec8ba853c01f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"592ca6631f4bb263dd74a704c3e6c9ea3bfc0265ea07b1be7082cb2e9037daea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51babc4fd382198538885860f0ecd611e19ef209400ddf1f8ffdec8ba853c01f"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"592ca6631f4bb263dd74a704c3e6c9ea3bfc0265ea07b1be7082cb2e9037daea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97208d1bed487e8824b652fad5033caed8842e60ae6afca0a84ec01a2e1b3b1"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e97208d1bed487e8824b652fad5033caed8842e60ae6afca0a84ec01a2e1b3b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e97208d1bed487e8824b652fad5033caed8842e60ae6afca0a84ec01a2e1b3b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e97208d1bed487e8824b652fad5033caed8842e60ae6afca0a84ec01a2e1b3b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51babc4fd382198538885860f0ecd611e19ef209400ddf1f8ffdec8ba853c01f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51babc4fd382198538885860f0ecd611e19ef209400ddf1f8ffdec8ba853c01f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/592ca6631f4bb263dd74a704c3e6c9ea3bfc0265ea07b1be7082cb2e9037daea"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51babc4fd382198538885860f0ecd611e19ef209400ddf1f8ffdec8ba853c01f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"592ca6631f4bb263dd74a704c3e6c9ea3bfc0265ea07b1be7082cb2e9037daea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["592ca6631f4bb263dd74a704c3e6c9ea3bfc0265ea07b1be7082cb2e9037daea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51babc4fd382198538885860f0ecd611e19ef209400ddf1f8ffdec8ba853c01f"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"592ca6631f4bb263dd74a704c3e6c9ea3bfc0265ea07b1be7082cb2e9037daea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2224f35a4e94385cd3bffcfbd0b39d32a38745684d4f2db37205297b101ee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2224f35a4e94385cd3bffcfbd0b39d32a38745684d4f2db37205297b101ee7"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97208d1bed487e8824b652fad5033caed8842e60ae6afca0a84ec01a2e1b3b1"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb81137a747db887f0913eb0c7a3f1ae1a7014625fe7cc37d6b8eb3c16c51f7"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2224f35a4e94385cd3bffcfbd0b39d32a38745684d4f2db37205297b101ee7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e97208d1bed487e8824b652fad5033caed8842e60ae6afca0a84ec01a2e1b3b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb81137a747db887f0913eb0c7a3f1ae1a7014625fe7cc37d6b8eb3c16c51f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb81137a747db887f0913eb0c7a3f1ae1a7014625fe7cc37d6b8eb3c16c51f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/592ca6631f4bb263dd74a704c3e6c9ea3bfc0265ea07b1be7082cb2e9037daea"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb81137a747db887f0913eb0c7a3f1ae1a7014625fe7cc37d6b8eb3c16c51f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51babc4fd382198538885860f0ecd611e19ef209400ddf1f8ffdec8ba853c01f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"592ca6631f4bb263dd74a704c3e6c9ea3bfc0265ea07b1be7082cb2e9037daea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b28c94391e7027073727fa5b88ebf40c56646912469f49954bacf308df5010"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2224f35a4e94385cd3bffcfbd0b39d32a38745684d4f2db37205297b101ee7"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b28c94391e7027073727fa5b88ebf40c56646912469f49954bacf308df5010","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5b28c94391e7027073727fa5b88ebf40c56646912469f49954bacf308df5010"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb81137a747db887f0913eb0c7a3f1ae1a7014625fe7cc37d6b8eb3c16c51f7"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b28c94391e7027073727fa5b88ebf40c56646912469f49954bacf308df5010","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2224f35a4e94385cd3bffcfbd0b39d32a38745684d4f2db37205297b101ee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e2224f35a4e94385cd3bffcfbd0b39d32a38745684d4f2db37205297b101ee7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b28c94391e7027073727fa5b88ebf40c56646912469f49954bacf308df5010"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2224f35a4e94385cd3bffcfbd0b39d32a38745684d4f2db37205297b101ee7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2224f35a4e94385cd3bffcfbd0b39d32a38745684d4f2db37205297b101ee7"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb81137a747db887f0913eb0c7a3f1ae1a7014625fe7cc37d6b8eb3c16c51f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b28c94391e7027073727fa5b88ebf40c56646912469f49954bacf308df5010","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e2224f35a4e94385cd3bffcfbd0b39d32a38745684d4f2db37205297b101ee7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"} {"level":"info","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"} {"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"} {"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"} {"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"} {"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"} {"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"} {"level":"info","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57878","PortSpecifier":{"PortValue":57878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d346d350-03f8-45e3-9add-ab4512cb701c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57878","PortSpecifier":{"PortValue":57878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924327,"nanos":952947774},"http":{"id":"d346d350-03f8-45e3-9add-ab4512cb701c","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33600","PortSpecifier":{"PortValue":33600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ff55d12-86e3-4666-8f44-22966490fbae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33600","PortSpecifier":{"PortValue":33600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924327,"nanos":993146025},"http":{"id":"5ff55d12-86e3-4666-8f44-22966490fbae","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57886","PortSpecifier":{"PortValue":57886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","method":"POST","path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57886","PortSpecifier":{"PortValue":57886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924328,"nanos":32397785},"http":{"id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tLpPTBAP1h9h7CYO_2QZQRrqiuMnpSkUzRSJVnZrPzvgFuNaUQtDgdlqaEgE"} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tLpPTBAP1h9h7CYO_2QZQRrqiuMnpSkUzRSJVnZrPzvgFuNaUQtDgdlqaEgE\"}"} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","keyName":"e2e-rate-a-3d1927","subscription":"e2e-rate-iso-a-3d1927","tenant":"e2e-shared-a-53d0a0","userId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1927\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1927","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"}} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1927"} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","keyName":"e2e-rate-a-3d1927","selected_subscription":"e2e-rate-iso-a-3d1927","selected_subscription_key":"ai-tenant-e2e-shared-a-53d0a0/e2e-rate-iso-a-3d1927@ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1927","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60112","PortSpecifier":{"PortValue":60112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","method":"POST","path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60112","PortSpecifier":{"PortValue":60112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924329,"nanos":122547980},"http":{"id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tLpPTBAP1h9h7CYO_2QZQRrqiuMnpSkUzRSJVnZrPzvgFuNaUQtDgdlqaEgE"} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tLpPTBAP1h9h7CYO_2QZQRrqiuMnpSkUzRSJVnZrPzvgFuNaUQtDgdlqaEgE\"}"} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","keyName":"e2e-rate-a-3d1927","subscription":"e2e-rate-iso-a-3d1927","tenant":"e2e-shared-a-53d0a0","userId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1927\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1927","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"}} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1927"} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","keyName":"e2e-rate-a-3d1927","selected_subscription":"e2e-rate-iso-a-3d1927","selected_subscription_key":"ai-tenant-e2e-shared-a-53d0a0/e2e-rate-iso-a-3d1927@ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1927","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60116","PortSpecifier":{"PortValue":60116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","method":"POST","path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60116","PortSpecifier":{"PortValue":60116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924330,"nanos":170065503},"http":{"id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tLpPTBAP1h9h7CYO_2QZQRrqiuMnpSkUzRSJVnZrPzvgFuNaUQtDgdlqaEgE"} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tLpPTBAP1h9h7CYO_2QZQRrqiuMnpSkUzRSJVnZrPzvgFuNaUQtDgdlqaEgE\"}"} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","keyName":"e2e-rate-a-3d1927","subscription":"e2e-rate-iso-a-3d1927","tenant":"e2e-shared-a-53d0a0","userId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1927\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1927","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"}} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1927"} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","keyName":"e2e-rate-a-3d1927","selected_subscription":"e2e-rate-iso-a-3d1927","selected_subscription_key":"ai-tenant-e2e-shared-a-53d0a0/e2e-rate-iso-a-3d1927@ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1927","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c80e1735-e446-432c-ad51-91beab0ba402","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48218","PortSpecifier":{"PortValue":48218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c80e1735-e446-432c-ad51-91beab0ba402","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c80e1735-e446-432c-ad51-91beab0ba402","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48218","PortSpecifier":{"PortValue":48218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924343,"nanos":15185342},"http":{"id":"c80e1735-e446-432c-ad51-91beab0ba402","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c80e1735-e446-432c-ad51-91beab0ba402","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c80e1735-e446-432c-ad51-91beab0ba402","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c80e1735-e446-432c-ad51-91beab0ba402","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c80e1735-e446-432c-ad51-91beab0ba402","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55894","PortSpecifier":{"PortValue":55894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c869cece-7758-4e7b-a035-693a9e7ff321","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55894","PortSpecifier":{"PortValue":55894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924343,"nanos":58584064},"http":{"id":"c869cece-7758-4e7b-a035-693a9e7ff321","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48220","PortSpecifier":{"PortValue":48220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","method":"POST","path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48220","PortSpecifier":{"PortValue":48220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924343,"nanos":98626415},"http":{"id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Mzab1N2cKVeOJjkF_lxUR5x5R00CGMVhs4RHsgsYqHM2XFgo14PH4VRFnj4l"} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Mzab1N2cKVeOJjkF_lxUR5x5R00CGMVhs4RHsgsYqHM2XFgo14PH4VRFnj4l\"}"} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","keyName":"e2e-rate-a-39cdd5","subscription":"e2e-rate-iso-a-39cdd5","tenant":"e2e-shared-a-53d0a0","userId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\",\"requestedSubscription\":\"e2e-rate-iso-a-39cdd5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39cdd5","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-39cdd5"} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","keyName":"e2e-rate-a-39cdd5","selected_subscription":"e2e-rate-iso-a-39cdd5","selected_subscription_key":"ai-tenant-e2e-shared-a-53d0a0/e2e-rate-iso-a-39cdd5@ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39cdd5","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48230","PortSpecifier":{"PortValue":48230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93ea7977-5980-4501-8af1-b0e8d6074f41","method":"POST","path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48230","PortSpecifier":{"PortValue":48230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924344,"nanos":148375295},"http":{"id":"93ea7977-5980-4501-8af1-b0e8d6074f41","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Mzab1N2cKVeOJjkF_lxUR5x5R00CGMVhs4RHsgsYqHM2XFgo14PH4VRFnj4l"} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Mzab1N2cKVeOJjkF_lxUR5x5R00CGMVhs4RHsgsYqHM2XFgo14PH4VRFnj4l\"}"} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","keyName":"e2e-rate-a-39cdd5","subscription":"e2e-rate-iso-a-39cdd5","tenant":"e2e-shared-a-53d0a0","userId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\",\"requestedSubscription\":\"e2e-rate-iso-a-39cdd5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39cdd5","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"}} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-39cdd5"} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","keyName":"e2e-rate-a-39cdd5","selected_subscription":"e2e-rate-iso-a-39cdd5","selected_subscription_key":"ai-tenant-e2e-shared-a-53d0a0/e2e-rate-iso-a-39cdd5@ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39cdd5","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48246","PortSpecifier":{"PortValue":48246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ccfe21d-7491-466a-859d-06c0a09086c7","method":"POST","path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48246","PortSpecifier":{"PortValue":48246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924345,"nanos":189111969},"http":{"id":"5ccfe21d-7491-466a-859d-06c0a09086c7","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Mzab1N2cKVeOJjkF_lxUR5x5R00CGMVhs4RHsgsYqHM2XFgo14PH4VRFnj4l"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Mzab1N2cKVeOJjkF_lxUR5x5R00CGMVhs4RHsgsYqHM2XFgo14PH4VRFnj4l\"}"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","keyName":"e2e-rate-a-39cdd5","subscription":"e2e-rate-iso-a-39cdd5","tenant":"e2e-shared-a-53d0a0","userId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\",\"requestedSubscription\":\"e2e-rate-iso-a-39cdd5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39cdd5","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-39cdd5"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","keyName":"e2e-rate-a-39cdd5","selected_subscription":"e2e-rate-iso-a-39cdd5","selected_subscription_key":"ai-tenant-e2e-shared-a-53d0a0/e2e-rate-iso-a-39cdd5@ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39cdd5","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55900","PortSpecifier":{"PortValue":55900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","method":"POST","path":"/ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9/v1/completions","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55900","PortSpecifier":{"PortValue":55900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924345,"nanos":226045262},"http":{"id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ogkRniHGqzequXy_tn33ykSwcX3rnp6JXmXYlO1fzhuDysjzqSSdJJ9qzxP"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ogkRniHGqzequXy_tn33ykSwcX3rnp6JXmXYlO1fzhuDysjzqSSdJJ9qzxP\"}"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2803ba7d-97ac-423f-b8a4-80af4c8e3f52","keyName":"e2e-rate-b-39cdd5","subscription":"e2e-rate-iso-b-39cdd5","tenant":"e2e-shared-b-3f5fc9","userId":"2803ba7d-97ac-423f-b8a4-80af4c8e3f52","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9\",\"requestedSubscription\":\"e2e-rate-iso-b-39cdd5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3f5fc9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-39cdd5","namespace":"ai-tenant-e2e-shared-b-3f5fc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9"}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-39cdd5"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2803ba7d-97ac-423f-b8a4-80af4c8e3f52","keyName":"e2e-rate-b-39cdd5","selected_subscription":"e2e-rate-iso-b-39cdd5","selected_subscription_key":"ai-tenant-e2e-shared-b-3f5fc9/e2e-rate-iso-b-39cdd5@ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3f5fc9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-39cdd5","namespace":"ai-tenant-e2e-shared-b-3f5fc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fb81137a747db887f0913eb0c7a3f1ae1a7014625fe7cc37d6b8eb3c16c51f7"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70dc6222cd324628bfb24237b1835a4aefe2cdc62cf59af7b62ea09569c118a5"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5b28c94391e7027073727fa5b88ebf40c56646912469f49954bacf308df5010"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ca4072ade7f0d6e53280a4bcab690ed94471afd868f5e89aa05a03976ecd54a"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e2224f35a4e94385cd3bffcfbd0b39d32a38745684d4f2db37205297b101ee7"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e97208d1bed487e8824b652fad5033caed8842e60ae6afca0a84ec01a2e1b3b1"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d8e95ad4eae8d4bc0657d7334e568d9d3d6cf030ba81c574885545cb3c0321a"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51babc4fd382198538885860f0ecd611e19ef209400ddf1f8ffdec8ba853c01f"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/592ca6631f4bb263dd74a704c3e6c9ea3bfc0265ea07b1be7082cb2e9037daea"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cabfc19c58915dd8790d952b5cf981f3f6718cee35753518e7f408459352f1cf"} {"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"} {"level":"info","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43346","PortSpecifier":{"PortValue":43346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d46039e-d37c-4316-aade-b92c5aeae105","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43346","PortSpecifier":{"PortValue":43346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924409,"nanos":537643495},"http":{"id":"5d46039e-d37c-4316-aade-b92c5aeae105","method":"POST","headers":{":authority":"maas.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43358","PortSpecifier":{"PortValue":43358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15944bf8-5783-46ee-a570-c91b104ba64c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43358","PortSpecifier":{"PortValue":43358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924409,"nanos":596832219},"http":{"id":"15944bf8-5783-46ee-a570-c91b104ba64c","method":"POST","headers":{":authority":"maas.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TpCcKkg8HlvHgYl4_8lWG4CVsj2j9C4JCaKykNKew98LsHev2AzJEFmpDmsU"} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TpCcKkg8HlvHgYl4_8lWG4CVsj2j9C4JCaKykNKew98LsHev2AzJEFmpDmsU\"}"} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b64ef822-3d23-48f7-a0d2-83f76c7d9f61","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"b64ef822-3d23-48f7-a0d2-83f76c7d9f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b64ef822-3d23-48f7-a0d2-83f76c7d9f61","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710"} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710"} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710"} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3"} {"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3"} {"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3"} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"} {"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"} {"level":"error","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"} {"level":"error","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082"} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"} {"level":"info","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"} {"level":"debug","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"} {"level":"info","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54332","PortSpecifier":{"PortValue":54332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-937547.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54332","PortSpecifier":{"PortValue":54332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924449,"nanos":174886399},"http":{"id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","method":"POST","headers":{":authority":"e2e-ipp-a-937547.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}} {"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-937547.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-937547/ipp-route-937547\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-937547/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54346","PortSpecifier":{"PortValue":54346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","method":"POST","path":"/ai-tenant-e2e-ipp-a-937547/ipp-route-937547/v1/chat/completions","host":"e2e-ipp-a-937547.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54346","PortSpecifier":{"PortValue":54346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924451,"nanos":245608509},"http":{"id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","method":"POST","headers":{":authority":"e2e-ipp-a-937547.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-937547/ipp-route-937547/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fSDuJug89VQGIeMB_qJBRQTPytuwjz94BhaHa7NJwheVae6zCzKrC8CwtJa2"} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-937547.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fSDuJug89VQGIeMB_qJBRQTPytuwjz94BhaHa7NJwheVae6zCzKrC8CwtJa2\"}"} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-937547.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fef9d508-fee5-488a-89d0-b9c9c1fb752c","keyName":"e2e-ipp-937547","subscription":"ipp-route-937547-sub","tenant":"e2e-ipp-a-937547","userId":"fef9d508-fee5-488a-89d0-b9c9c1fb752c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-937547.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-937547/ipp-route-937547\",\"requestedSubscription\":\"ipp-route-937547-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-937547.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-937547","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-937547-sub","namespace":"ai-tenant-e2e-ipp-a-937547","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-937547/ipp-route-937547"}} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-937547/ipp-route-937547\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-937547/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-937547-sub"} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fef9d508-fee5-488a-89d0-b9c9c1fb752c","keyName":"e2e-ipp-937547","selected_subscription":"ipp-route-937547-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-937547/ipp-route-937547-sub@ai-tenant-e2e-ipp-a-937547/ipp-route-937547","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-937547","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-937547-sub","namespace":"ai-tenant-e2e-ipp-a-937547","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-937547/ipp-route-937547"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384"} {"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710"} {"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"} {"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8"} {"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf"} {"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3"} {"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"} {"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"} {"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154"} {"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493"} {"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082"} {"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103"}