--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a98bdf4f5417641edeea1d6e606e2751f31d71775e165cf6e5dc733d73ee0a1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a98bdf4f5417641edeea1d6e606e2751f31d71775e165cf6e5dc733d73ee0a1a"} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"364e1e2cad26de6e7ed17e0bbbb52f4ff0bb0754791a97435729d2e3b589d429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"364e1e2cad26de6e7ed17e0bbbb52f4ff0bb0754791a97435729d2e3b589d429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/364e1e2cad26de6e7ed17e0bbbb52f4ff0bb0754791a97435729d2e3b589d429"} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"364e1e2cad26de6e7ed17e0bbbb52f4ff0bb0754791a97435729d2e3b589d429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"364e1e2cad26de6e7ed17e0bbbb52f4ff0bb0754791a97435729d2e3b589d429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"364e1e2cad26de6e7ed17e0bbbb52f4ff0bb0754791a97435729d2e3b589d429","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/364e1e2cad26de6e7ed17e0bbbb52f4ff0bb0754791a97435729d2e3b589d429"} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"364e1e2cad26de6e7ed17e0bbbb52f4ff0bb0754791a97435729d2e3b589d429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["364e1e2cad26de6e7ed17e0bbbb52f4ff0bb0754791a97435729d2e3b589d429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"364e1e2cad26de6e7ed17e0bbbb52f4ff0bb0754791a97435729d2e3b589d429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"364e1e2cad26de6e7ed17e0bbbb52f4ff0bb0754791a97435729d2e3b589d429","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/364e1e2cad26de6e7ed17e0bbbb52f4ff0bb0754791a97435729d2e3b589d429"} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:12:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"} {"level":"debug","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"} {"level":"debug","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:12:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:12:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:12:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:12:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"} {"level":"debug","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"} {"level":"debug","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:12:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:12:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:12:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:12:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"} {"level":"debug","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"} {"level":"debug","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:12:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:12:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:12:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"} {"level":"info","ts":"2026-07-16T22:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4616ef5c005d12a04014791384c0b89b062d4b11a04852b67db13f6735b4037"} {"level":"info","ts":"2026-07-16T22:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba3c58fda229f4761eafc4d2dae3531a68d64920cc8c6fda6612c368be50e345"} {"level":"info","ts":"2026-07-16T22:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0c30d18c681cef547a11707eb9367e1f3af5767a8cec9f34d6058ca65fb440f"} {"level":"info","ts":"2026-07-16T22:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8746ec8b29fae17c6cd6b4a0c65b07564ef822dba018b1b88dcafccc97d0e39"} {"level":"info","ts":"2026-07-16T22:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/364e1e2cad26de6e7ed17e0bbbb52f4ff0bb0754791a97435729d2e3b589d429"} {"level":"info","ts":"2026-07-16T22:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a98bdf4f5417641edeea1d6e606e2751f31d71775e165cf6e5dc733d73ee0a1a"} {"level":"info","ts":"2026-07-16T22:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86e1138b28727573de7348d12a249375122a53e98e177aade51caddbbe51cdc6"} {"level":"info","ts":"2026-07-16T22:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c444439948202c736c0a67740672dba5b89761854a8e947920181ec0e58d2fc"} {"level":"debug","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0"} {"level":"debug","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0"} {"level":"debug","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0"} {"level":"debug","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0"} {"level":"debug","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b5889fff53ce7c53005ca851e3a3d7ad636726fbb6b68d71ceb85be8eb03d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b5889fff53ce7c53005ca851e3a3d7ad636726fbb6b68d71ceb85be8eb03d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b5889fff53ce7c53005ca851e3a3d7ad636726fbb6b68d71ceb85be8eb03d3"} {"level":"info","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b5889fff53ce7c53005ca851e3a3d7ad636726fbb6b68d71ceb85be8eb03d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b5889fff53ce7c53005ca851e3a3d7ad636726fbb6b68d71ceb85be8eb03d3"} {"level":"info","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b5889fff53ce7c53005ca851e3a3d7ad636726fbb6b68d71ceb85be8eb03d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b5889fff53ce7c53005ca851e3a3d7ad636726fbb6b68d71ceb85be8eb03d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9b5889fff53ce7c53005ca851e3a3d7ad636726fbb6b68d71ceb85be8eb03d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b5889fff53ce7c53005ca851e3a3d7ad636726fbb6b68d71ceb85be8eb03d3"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b5889fff53ce7c53005ca851e3a3d7ad636726fbb6b68d71ceb85be8eb03d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9b5889fff53ce7c53005ca851e3a3d7ad636726fbb6b68d71ceb85be8eb03d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0"} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b5889fff53ce7c53005ca851e3a3d7ad636726fbb6b68d71ceb85be8eb03d3"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0"} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a"} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a"} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a"} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a"} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbfb38aa3e0dc9d1d52b94773ce61032d7a3757b368264df62a7fa8f69b49fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbfb38aa3e0dc9d1d52b94773ce61032d7a3757b368264df62a7fa8f69b49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbfb38aa3e0dc9d1d52b94773ce61032d7a3757b368264df62a7fa8f69b49fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbfb38aa3e0dc9d1d52b94773ce61032d7a3757b368264df62a7fa8f69b49fa"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbfb38aa3e0dc9d1d52b94773ce61032d7a3757b368264df62a7fa8f69b49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbfb38aa3e0dc9d1d52b94773ce61032d7a3757b368264df62a7fa8f69b49fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bbfb38aa3e0dc9d1d52b94773ce61032d7a3757b368264df62a7fa8f69b49fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61"} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbfb38aa3e0dc9d1d52b94773ce61032d7a3757b368264df62a7fa8f69b49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbfb38aa3e0dc9d1d52b94773ce61032d7a3757b368264df62a7fa8f69b49fa"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbfb38aa3e0dc9d1d52b94773ce61032d7a3757b368264df62a7fa8f69b49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d453a3808986f991f22bcb2fbd67f9de946dcbbd34eefa98cf07828f9710bf56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d453a3808986f991f22bcb2fbd67f9de946dcbbd34eefa98cf07828f9710bf56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d286b720aa38fc8316fa71aa1f7e2b1acd68083bca1b3e3a9e725c6691c110fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d453a3808986f991f22bcb2fbd67f9de946dcbbd34eefa98cf07828f9710bf56"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d286b720aa38fc8316fa71aa1f7e2b1acd68083bca1b3e3a9e725c6691c110fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d453a3808986f991f22bcb2fbd67f9de946dcbbd34eefa98cf07828f9710bf56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d453a3808986f991f22bcb2fbd67f9de946dcbbd34eefa98cf07828f9710bf56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d453a3808986f991f22bcb2fbd67f9de946dcbbd34eefa98cf07828f9710bf56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d286b720aa38fc8316fa71aa1f7e2b1acd68083bca1b3e3a9e725c6691c110fe"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d286b720aa38fc8316fa71aa1f7e2b1acd68083bca1b3e3a9e725c6691c110fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d286b720aa38fc8316fa71aa1f7e2b1acd68083bca1b3e3a9e725c6691c110fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d286b720aa38fc8316fa71aa1f7e2b1acd68083bca1b3e3a9e725c6691c110fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d453a3808986f991f22bcb2fbd67f9de946dcbbd34eefa98cf07828f9710bf56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d286b720aa38fc8316fa71aa1f7e2b1acd68083bca1b3e3a9e725c6691c110fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d453a3808986f991f22bcb2fbd67f9de946dcbbd34eefa98cf07828f9710bf56"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d286b720aa38fc8316fa71aa1f7e2b1acd68083bca1b3e3a9e725c6691c110fe"} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545"} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545"} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545"} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545"} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a057329a5f6d7ca4a40f448f1f17b3420ff3e08797f30951b8a6b66b7eeee954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a057329a5f6d7ca4a40f448f1f17b3420ff3e08797f30951b8a6b66b7eeee954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a057329a5f6d7ca4a40f448f1f17b3420ff3e08797f30951b8a6b66b7eeee954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a057329a5f6d7ca4a40f448f1f17b3420ff3e08797f30951b8a6b66b7eeee954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a057329a5f6d7ca4a40f448f1f17b3420ff3e08797f30951b8a6b66b7eeee954"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a057329a5f6d7ca4a40f448f1f17b3420ff3e08797f30951b8a6b66b7eeee954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a057329a5f6d7ca4a40f448f1f17b3420ff3e08797f30951b8a6b66b7eeee954"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a057329a5f6d7ca4a40f448f1f17b3420ff3e08797f30951b8a6b66b7eeee954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a057329a5f6d7ca4a40f448f1f17b3420ff3e08797f30951b8a6b66b7eeee954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a057329a5f6d7ca4a40f448f1f17b3420ff3e08797f30951b8a6b66b7eeee954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a057329a5f6d7ca4a40f448f1f17b3420ff3e08797f30951b8a6b66b7eeee954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a057329a5f6d7ca4a40f448f1f17b3420ff3e08797f30951b8a6b66b7eeee954"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b"} {"level":"error","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9"} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9"} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c"} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9"} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a"} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bef570b475cbcb9a223d10c4eea2fad2973f533b2d6657db1f528b9122f3d076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bef570b475cbcb9a223d10c4eea2fad2973f533b2d6657db1f528b9122f3d076"} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bef570b475cbcb9a223d10c4eea2fad2973f533b2d6657db1f528b9122f3d076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bef570b475cbcb9a223d10c4eea2fad2973f533b2d6657db1f528b9122f3d076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bef570b475cbcb9a223d10c4eea2fad2973f533b2d6657db1f528b9122f3d076"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a"} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bef570b475cbcb9a223d10c4eea2fad2973f533b2d6657db1f528b9122f3d076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bef570b475cbcb9a223d10c4eea2fad2973f533b2d6657db1f528b9122f3d076"} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bef570b475cbcb9a223d10c4eea2fad2973f533b2d6657db1f528b9122f3d076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bef570b475cbcb9a223d10c4eea2fad2973f533b2d6657db1f528b9122f3d076"} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152"} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a"} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152"} {"level":"error","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a"} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152"} {"level":"error","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152"} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c500a52f1079ccfe08095ccefc936327dd13f0c7b43ac3deb1812f93f1c47d26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c500a52f1079ccfe08095ccefc936327dd13f0c7b43ac3deb1812f93f1c47d26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c500a52f1079ccfe08095ccefc936327dd13f0c7b43ac3deb1812f93f1c47d26"} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c500a52f1079ccfe08095ccefc936327dd13f0c7b43ac3deb1812f93f1c47d26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c500a52f1079ccfe08095ccefc936327dd13f0c7b43ac3deb1812f93f1c47d26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c500a52f1079ccfe08095ccefc936327dd13f0c7b43ac3deb1812f93f1c47d26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea5d43b1aaf25fb22efeaa6a3687f6b72b79c3ee3f51ce3c72c3c4e6af24a3e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29"} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea5d43b1aaf25fb22efeaa6a3687f6b72b79c3ee3f51ce3c72c3c4e6af24a3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c500a52f1079ccfe08095ccefc936327dd13f0c7b43ac3deb1812f93f1c47d26"} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea5d43b1aaf25fb22efeaa6a3687f6b72b79c3ee3f51ce3c72c3c4e6af24a3e5"} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c500a52f1079ccfe08095ccefc936327dd13f0c7b43ac3deb1812f93f1c47d26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea5d43b1aaf25fb22efeaa6a3687f6b72b79c3ee3f51ce3c72c3c4e6af24a3e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea5d43b1aaf25fb22efeaa6a3687f6b72b79c3ee3f51ce3c72c3c4e6af24a3e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea5d43b1aaf25fb22efeaa6a3687f6b72b79c3ee3f51ce3c72c3c4e6af24a3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29"} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b8ef37e15d581362801e5d8b260e17266c809c813aa7229506623c3daacac1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152"} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b8ef37e15d581362801e5d8b260e17266c809c813aa7229506623c3daacac1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea5d43b1aaf25fb22efeaa6a3687f6b72b79c3ee3f51ce3c72c3c4e6af24a3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b8ef37e15d581362801e5d8b260e17266c809c813aa7229506623c3daacac1a"} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea5d43b1aaf25fb22efeaa6a3687f6b72b79c3ee3f51ce3c72c3c4e6af24a3e5"} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b8ef37e15d581362801e5d8b260e17266c809c813aa7229506623c3daacac1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b8ef37e15d581362801e5d8b260e17266c809c813aa7229506623c3daacac1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b8ef37e15d581362801e5d8b260e17266c809c813aa7229506623c3daacac1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29"} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b8ef37e15d581362801e5d8b260e17266c809c813aa7229506623c3daacac1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152"} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:14:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b8ef37e15d581362801e5d8b260e17266c809c813aa7229506623c3daacac1a"} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"} {"level":"info","ts":"2026-07-16T22:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152"} {"level":"info","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41648","PortSpecifier":{"PortValue":41648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41648","PortSpecifier":{"PortValue":41648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240099,"nanos":917107719},"http":{"id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/auth-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46ba7938-0ea3-49ca-b5c5-2f0349e0c371","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47218","PortSpecifier":{"PortValue":47218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47218","PortSpecifier":{"PortValue":47218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240099,"nanos":976307467},"http":{"id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","method":"POST","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/auth-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9424d4d8-cc1d-450b-b24b-b168ab516d71","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41664","PortSpecifier":{"PortValue":41664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","method":"GET","path":"/maas-api/v1/api-keys/8cccd644-160d-484b-a094-f08f9cde8c5c","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41664","PortSpecifier":{"PortValue":41664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240100,"nanos":38171980},"http":{"id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","method":"GET","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8cccd644-160d-484b-a094-f08f9cde8c5c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8cccd644-160d-484b-a094-f08f9cde8c5c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/auth-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b07a219e-d68b-4352-a382-ead1b8b83b5b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"290798bf-08d2-4061-8de3-9286e29ac973","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47222","PortSpecifier":{"PortValue":47222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"290798bf-08d2-4061-8de3-9286e29ac973","method":"GET","path":"/maas-api/v1/api-keys/9e6ba05b-6805-4cdd-89ff-1fa97aa5aff5","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"290798bf-08d2-4061-8de3-9286e29ac973","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47222","PortSpecifier":{"PortValue":47222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240100,"nanos":76061648},"http":{"id":"290798bf-08d2-4061-8de3-9286e29ac973","method":"GET","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9e6ba05b-6805-4cdd-89ff-1fa97aa5aff5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"290798bf-08d2-4061-8de3-9286e29ac973","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"290798bf-08d2-4061-8de3-9286e29ac973","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"290798bf-08d2-4061-8de3-9286e29ac973","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9e6ba05b-6805-4cdd-89ff-1fa97aa5aff5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"290798bf-08d2-4061-8de3-9286e29ac973","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"290798bf-08d2-4061-8de3-9286e29ac973","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"290798bf-08d2-4061-8de3-9286e29ac973","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/auth-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"290798bf-08d2-4061-8de3-9286e29ac973","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"290798bf-08d2-4061-8de3-9286e29ac973","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"290798bf-08d2-4061-8de3-9286e29ac973","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"290798bf-08d2-4061-8de3-9286e29ac973","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"290798bf-08d2-4061-8de3-9286e29ac973","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bffcee59-08c3-4a84-a632-41477f61efbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46502","PortSpecifier":{"PortValue":46502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bffcee59-08c3-4a84-a632-41477f61efbb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bffcee59-08c3-4a84-a632-41477f61efbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46502","PortSpecifier":{"PortValue":46502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240119,"nanos":313662349},"http":{"id":"bffcee59-08c3-4a84-a632-41477f61efbb","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bffcee59-08c3-4a84-a632-41477f61efbb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bffcee59-08c3-4a84-a632-41477f61efbb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bffcee59-08c3-4a84-a632-41477f61efbb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bffcee59-08c3-4a84-a632-41477f61efbb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bffcee59-08c3-4a84-a632-41477f61efbb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bffcee59-08c3-4a84-a632-41477f61efbb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/auth-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bffcee59-08c3-4a84-a632-41477f61efbb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bffcee59-08c3-4a84-a632-41477f61efbb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bffcee59-08c3-4a84-a632-41477f61efbb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bffcee59-08c3-4a84-a632-41477f61efbb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bffcee59-08c3-4a84-a632-41477f61efbb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49242","PortSpecifier":{"PortValue":49242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49242","PortSpecifier":{"PortValue":49242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240119,"nanos":350531671},"http":{"id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","method":"POST","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/auth-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7202403d-07c7-4db0-ad47-9140f0a89a8a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79052fee-7342-416e-9e9e-c8be234150ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46516","PortSpecifier":{"PortValue":46516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79052fee-7342-416e-9e9e-c8be234150ea","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79052fee-7342-416e-9e9e-c8be234150ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46516","PortSpecifier":{"PortValue":46516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240119,"nanos":394002478},"http":{"id":"79052fee-7342-416e-9e9e-c8be234150ea","method":"GET","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79052fee-7342-416e-9e9e-c8be234150ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OHRD9FWxg8UgVuTU_W7K5QMve1ZOcHPdiLcg05wI90otVbHFyu9mjseFqYco"} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79052fee-7342-416e-9e9e-c8be234150ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OHRD9FWxg8UgVuTU_W7K5QMve1ZOcHPdiLcg05wI90otVbHFyu9mjseFqYco\"}"} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79052fee-7342-416e-9e9e-c8be234150ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9167c231-3d57-44e8-94e7-3e92f62b3d15","keyName":"e2e-auth-iso-a-6ca59e","subscription":"e2e-auth-iso-e349b6","tenant":"e2e-shared-a-5d61a3","userId":"9167c231-3d57-44e8-94e7-3e92f62b3d15","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79052fee-7342-416e-9e9e-c8be234150ea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79052fee-7342-416e-9e9e-c8be234150ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79052fee-7342-416e-9e9e-c8be234150ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79052fee-7342-416e-9e9e-c8be234150ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/auth-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79052fee-7342-416e-9e9e-c8be234150ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79052fee-7342-416e-9e9e-c8be234150ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e349b6"} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79052fee-7342-416e-9e9e-c8be234150ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79052fee-7342-416e-9e9e-c8be234150ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79052fee-7342-416e-9e9e-c8be234150ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:15:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79052fee-7342-416e-9e9e-c8be234150ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49024","PortSpecifier":{"PortValue":49024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49024","PortSpecifier":{"PortValue":49024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240138,"nanos":529435702},"http":{"id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/auth-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a489f359-4604-4cf9-a58f-84da5cbfd6ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43502","PortSpecifier":{"PortValue":43502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43502","PortSpecifier":{"PortValue":43502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240138,"nanos":562774816},"http":{"id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","method":"POST","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/auth-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0df6c3c9-8f9f-4555-8e13-156da754c02e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2744a7f-567b-45ad-9c0d-8367945ae0c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43510","PortSpecifier":{"PortValue":43510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2744a7f-567b-45ad-9c0d-8367945ae0c8","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2744a7f-567b-45ad-9c0d-8367945ae0c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43510","PortSpecifier":{"PortValue":43510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240138,"nanos":597538368},"http":{"id":"a2744a7f-567b-45ad-9c0d-8367945ae0c8","method":"GET","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2744a7f-567b-45ad-9c0d-8367945ae0c8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1b80EIrGORlf7zVYl_T4d4espAidnEn0kuY19gt0uTt3Ybefn3ODc7g4zFbut"} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a2744a7f-567b-45ad-9c0d-8367945ae0c8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ff5f80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1b80EIrGORlf7zVYl_T4d4espAidnEn0kuY19gt0uTt3Ybefn3ODc7g4zFbut\"}"} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a2744a7f-567b-45ad-9c0d-8367945ae0c8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ff5f80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2744a7f-567b-45ad-9c0d-8367945ae0c8","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2744a7f-567b-45ad-9c0d-8367945ae0c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a2744a7f-567b-45ad-9c0d-8367945ae0c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2744a7f-567b-45ad-9c0d-8367945ae0c8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-16T22:15:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2744a7f-567b-45ad-9c0d-8367945ae0c8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55702","PortSpecifier":{"PortValue":55702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55702","PortSpecifier":{"PortValue":55702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240157,"nanos":723543701},"http":{"id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/auth-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22c8c8f4-9553-451b-adde-279a5ce1aaaa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57018","PortSpecifier":{"PortValue":57018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57018","PortSpecifier":{"PortValue":57018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240157,"nanos":760653565},"http":{"id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","method":"POST","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/auth-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"582de74b-ebdf-4a6d-8b78-84178dc902f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55710","PortSpecifier":{"PortValue":55710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55710","PortSpecifier":{"PortValue":55710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240157,"nanos":793093926},"http":{"id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/auth-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fffef86-54dd-432c-b630-53d9f2cb5c5f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57024","PortSpecifier":{"PortValue":57024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57024","PortSpecifier":{"PortValue":57024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240157,"nanos":831600933},"http":{"id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","method":"POST","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/auth-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:15:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"623a4fde-ddeb-482a-bbaa-cbdb43c91df2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed704804-6ce3-4055-be99-f79792385d27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39954","PortSpecifier":{"PortValue":39954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed704804-6ce3-4055-be99-f79792385d27","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed704804-6ce3-4055-be99-f79792385d27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39954","PortSpecifier":{"PortValue":39954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240172,"nanos":730613857},"http":{"id":"ed704804-6ce3-4055-be99-f79792385d27","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed704804-6ce3-4055-be99-f79792385d27","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed704804-6ce3-4055-be99-f79792385d27","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed704804-6ce3-4055-be99-f79792385d27","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed704804-6ce3-4055-be99-f79792385d27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed704804-6ce3-4055-be99-f79792385d27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed704804-6ce3-4055-be99-f79792385d27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/auth-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed704804-6ce3-4055-be99-f79792385d27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed704804-6ce3-4055-be99-f79792385d27","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed704804-6ce3-4055-be99-f79792385d27","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed704804-6ce3-4055-be99-f79792385d27","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed704804-6ce3-4055-be99-f79792385d27","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42023a12-1819-441d-89d2-08e4c54f18fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50468","PortSpecifier":{"PortValue":50468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42023a12-1819-441d-89d2-08e4c54f18fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42023a12-1819-441d-89d2-08e4c54f18fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50468","PortSpecifier":{"PortValue":50468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240172,"nanos":771919933},"http":{"id":"42023a12-1819-441d-89d2-08e4c54f18fc","method":"POST","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42023a12-1819-441d-89d2-08e4c54f18fc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42023a12-1819-441d-89d2-08e4c54f18fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42023a12-1819-441d-89d2-08e4c54f18fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42023a12-1819-441d-89d2-08e4c54f18fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42023a12-1819-441d-89d2-08e4c54f18fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42023a12-1819-441d-89d2-08e4c54f18fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/auth-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42023a12-1819-441d-89d2-08e4c54f18fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42023a12-1819-441d-89d2-08e4c54f18fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42023a12-1819-441d-89d2-08e4c54f18fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42023a12-1819-441d-89d2-08e4c54f18fc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42023a12-1819-441d-89d2-08e4c54f18fc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50482","PortSpecifier":{"PortValue":50482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","method":"GET","path":"/maas-api/v1/api-keys/0cb678d9-430a-439e-b81f-161edd001d96","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50482","PortSpecifier":{"PortValue":50482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240172,"nanos":810839547},"http":{"id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","method":"GET","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0cb678d9-430a-439e-b81f-161edd001d96",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0cb678d9-430a-439e-b81f-161edd001d96",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/auth-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6de0703f-899e-4971-ad9f-0a4521fd0b21","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39956","PortSpecifier":{"PortValue":39956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","method":"GET","path":"/maas-api/v1/api-keys/0cb678d9-430a-439e-b81f-161edd001d96","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39956","PortSpecifier":{"PortValue":39956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240172,"nanos":846145725},"http":{"id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","method":"GET","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0cb678d9-430a-439e-b81f-161edd001d96",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0cb678d9-430a-439e-b81f-161edd001d96",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/auth-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:16:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45bfa7e8-d670-4ed0-8964-bbe0735ca3b1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49954","PortSpecifier":{"PortValue":49954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49954","PortSpecifier":{"PortValue":49954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240187,"nanos":752555434},"http":{"id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/auth-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcfb4b69-81b5-4cbb-aecd-bfca6f494ae1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59782","PortSpecifier":{"PortValue":59782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59782","PortSpecifier":{"PortValue":59782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240187,"nanos":791626198},"http":{"id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","method":"POST","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/auth-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6694e3ed-45d4-496b-a0f6-d459e36cf074","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49970","PortSpecifier":{"PortValue":49970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49970","PortSpecifier":{"PortValue":49970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240187,"nanos":834781951},"http":{"id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ECVkmI76KaYOwdMr_6ia6siUcjgV4IVktE8X5zbSUcb4bk5yZvX2Kfkevgqc"} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ECVkmI76KaYOwdMr_6ia6siUcjgV4IVktE8X5zbSUcb4bk5yZvX2Kfkevgqc\"}"} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"591ab67b-ce78-44cc-9068-835079946d0e","keyName":"e2e-auth-iso-a-5a1184","subscription":"e2e-auth-iso-317e46","tenant":"e2e-shared-a-5d61a3","userId":"591ab67b-ce78-44cc-9068-835079946d0e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/auth-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-317e46"} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:16:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"204b3a40-3ba4-45dd-9b7e-4ad6e39b6598","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d15fb2c765e711057f95e449b92b082ffd2767d9631ec6a4079c98c134665d9"} {"level":"info","ts":"2026-07-16T22:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/671e6fecc8f6c6887df69c197ed05f5c472afde9096e3f2edcb7cf4bf06c99f0"} {"level":"info","ts":"2026-07-16T22:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6db34a1dbe777096ede737ce7076c90a9b9a6cac4207f56377578b4426ae545"} {"level":"info","ts":"2026-07-16T22:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ebe46bdf7062251f97aacb644e9166224f481f99542fbd82b453a3b20e8cb0b"} {"level":"info","ts":"2026-07-16T22:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e77befa5018f73f482d40d3ab22a20839ae23f3a27149703e039f901269368a"} {"level":"info","ts":"2026-07-16T22:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a057329a5f6d7ca4a40f448f1f17b3420ff3e08797f30951b8a6b66b7eeee954"} {"level":"info","ts":"2026-07-16T22:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bbfb38aa3e0dc9d1d52b94773ce61032d7a3757b368264df62a7fa8f69b49fa"} {"level":"info","ts":"2026-07-16T22:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d286b720aa38fc8316fa71aa1f7e2b1acd68083bca1b3e3a9e725c6691c110fe"} {"level":"info","ts":"2026-07-16T22:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c500a52f1079ccfe08095ccefc936327dd13f0c7b43ac3deb1812f93f1c47d26"} {"level":"info","ts":"2026-07-16T22:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b8ef37e15d581362801e5d8b260e17266c809c813aa7229506623c3daacac1a"} {"level":"info","ts":"2026-07-16T22:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/519b0cdf99dd53629e482b659f9a46cf25514999275cdf7363aab3a912b09152"} {"level":"info","ts":"2026-07-16T22:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bef570b475cbcb9a223d10c4eea2fad2973f533b2d6657db1f528b9122f3d076"} {"level":"info","ts":"2026-07-16T22:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9b5889fff53ce7c53005ca851e3a3d7ad636726fbb6b68d71ceb85be8eb03d3"} {"level":"info","ts":"2026-07-16T22:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fad5716f832883c46c01c5bac085312e0fd14577f41f9cb4b604db3b94960bbf"} {"level":"info","ts":"2026-07-16T22:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d453a3808986f991f22bcb2fbd67f9de946dcbbd34eefa98cf07828f9710bf56"} {"level":"info","ts":"2026-07-16T22:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a2b314665afd46abbfddfe70b087610fde52cc24f9f86c26fdaeac4b7a73f61"} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012"} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012"} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"} {"level":"error","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85"} {"level":"info","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50"} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43"} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85"} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50"} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3"} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3"} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3"} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc"} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc"} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc"} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377"} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377"} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f1660dfd22ab7e877afb9dddaa9e4f9254e8a2f9b953951a8f86a7fbd15b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f1660dfd22ab7e877afb9dddaa9e4f9254e8a2f9b953951a8f86a7fbd15b59"} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f1660dfd22ab7e877afb9dddaa9e4f9254e8a2f9b953951a8f86a7fbd15b59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f1660dfd22ab7e877afb9dddaa9e4f9254e8a2f9b953951a8f86a7fbd15b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63f1660dfd22ab7e877afb9dddaa9e4f9254e8a2f9b953951a8f86a7fbd15b59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377"} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f1660dfd22ab7e877afb9dddaa9e4f9254e8a2f9b953951a8f86a7fbd15b59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f1660dfd22ab7e877afb9dddaa9e4f9254e8a2f9b953951a8f86a7fbd15b59"} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f1660dfd22ab7e877afb9dddaa9e4f9254e8a2f9b953951a8f86a7fbd15b59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377"} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f1660dfd22ab7e877afb9dddaa9e4f9254e8a2f9b953951a8f86a7fbd15b59"} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377"} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992"} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377"} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992"} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377"} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992"} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7"} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7"} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7"} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6"} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6"} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7"} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6"} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392"} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406"} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392"} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406"} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392"} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406"} {"level":"info","ts":"2026-07-16T22:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392"} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377"} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17"} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17"} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17"} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17"} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17"} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a"} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85"} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85"} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85"} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992"} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85"} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36"} {"level":"debug","ts":"2026-07-16T22:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36"} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc"} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392"} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50"} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f1660dfd22ab7e877afb9dddaa9e4f9254e8a2f9b953951a8f86a7fbd15b59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f1660dfd22ab7e877afb9dddaa9e4f9254e8a2f9b953951a8f86a7fbd15b59"} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea5d43b1aaf25fb22efeaa6a3687f6b72b79c3ee3f51ce3c72c3c4e6af24a3e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea5d43b1aaf25fb22efeaa6a3687f6b72b79c3ee3f51ce3c72c3c4e6af24a3e5"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c"} {"level":"debug","ts":"2026-07-16T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012"} {"level":"info","ts":"2026-07-16T22:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29"} {"level":"info","ts":"2026-07-16T22:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6"} {"level":"info","ts":"2026-07-16T22:17:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7"} {"level":"info","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36236","PortSpecifier":{"PortValue":36236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36236","PortSpecifier":{"PortValue":36236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240265,"nanos":801269187},"http":{"id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/sub-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e4d5160-cb6a-4041-bd49-f84d10980e64","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37698","PortSpecifier":{"PortValue":37698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37698","PortSpecifier":{"PortValue":37698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240265,"nanos":846004041},"http":{"id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","method":"POST","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/sub-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cc81bc5-c569-48d4-8495-1ccba04df0e8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36246","PortSpecifier":{"PortValue":36246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36246","PortSpecifier":{"PortValue":36246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240265,"nanos":887074187},"http":{"id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","method":"GET","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tfcFciWwU6TF0zdr_n1sX7PlxTQlEY9LDfl27bMrP99VVGb8A8zvSlup3tCp"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tfcFciWwU6TF0zdr_n1sX7PlxTQlEY9LDfl27bMrP99VVGb8A8zvSlup3tCp\"}"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c4d57e5-8332-4762-afb3-0f238c7c3ee6","keyName":"e2e-sub-iso-880a6a","subscription":"e2e-a-only-455638","tenant":"e2e-shared-a-5d61a3","userId":"2c4d57e5-8332-4762-afb3-0f238c7c3ee6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/sub-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-455638"} {"level":"info","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b5eee4e-e542-4c98-8d4b-2902dde7faa7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37714","PortSpecifier":{"PortValue":37714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37714","PortSpecifier":{"PortValue":37714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240265,"nanos":929360806},"http":{"id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","method":"GET","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KH5aGU6i8PkhaTIv_bDgRfaBCXjkC52UmFUR6U5F1VB56K1nvo11Lb3SpPnc"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ff5f80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KH5aGU6i8PkhaTIv_bDgRfaBCXjkC52UmFUR6U5F1VB56K1nvo11Lb3SpPnc\"}"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ff5f80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"47e834af-e0db-43c2-b277-dfdea2b717c1","keyName":"e2e-sub-iso-ba8b80","subscription":"e2e-b-only-455638","tenant":"e2e-shared-b-ff5f80","userId":"47e834af-e0db-43c2-b277-dfdea2b717c1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/sub-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-455638"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"693f0eed-f69f-4272-ac6f-9e53f6f55c2a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5724eadd-111e-4bdf-a2b9-97e25a103676","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37918","PortSpecifier":{"PortValue":37918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5724eadd-111e-4bdf-a2b9-97e25a103676","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5724eadd-111e-4bdf-a2b9-97e25a103676","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37918","PortSpecifier":{"PortValue":37918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240275,"nanos":825593439},"http":{"id":"5724eadd-111e-4bdf-a2b9-97e25a103676","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5724eadd-111e-4bdf-a2b9-97e25a103676","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5724eadd-111e-4bdf-a2b9-97e25a103676","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5724eadd-111e-4bdf-a2b9-97e25a103676","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5724eadd-111e-4bdf-a2b9-97e25a103676","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5724eadd-111e-4bdf-a2b9-97e25a103676","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5724eadd-111e-4bdf-a2b9-97e25a103676","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/sub-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5724eadd-111e-4bdf-a2b9-97e25a103676","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5724eadd-111e-4bdf-a2b9-97e25a103676","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5724eadd-111e-4bdf-a2b9-97e25a103676","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5724eadd-111e-4bdf-a2b9-97e25a103676","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5724eadd-111e-4bdf-a2b9-97e25a103676","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39358","PortSpecifier":{"PortValue":39358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39358","PortSpecifier":{"PortValue":39358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240275,"nanos":866474655},"http":{"id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","method":"POST","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/sub-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef2fd607-5cc9-47fe-b23e-b89fc000dee2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37934","PortSpecifier":{"PortValue":37934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37934","PortSpecifier":{"PortValue":37934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240275,"nanos":915428528},"http":{"id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SScaX8Ei9JPOabHa_Ovevqohdaql8oUXW7OLsEstO3T0QqQCsMjz2XGAswcl"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SScaX8Ei9JPOabHa_Ovevqohdaql8oUXW7OLsEstO3T0QqQCsMjz2XGAswcl\"}"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8ee8db35-4315-498b-9145-5681ecdcd9f3","keyName":"e2e-sub-iso-7c53bc","subscription":"e2e-shared-sub-c686c8","tenant":"e2e-shared-a-5d61a3","userId":"8ee8db35-4315-498b-9145-5681ecdcd9f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/sub-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c686c8"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a78b16a8-0a3b-400b-855a-6e559988d8d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39360","PortSpecifier":{"PortValue":39360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39360","PortSpecifier":{"PortValue":39360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240275,"nanos":945109974},"http":{"id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","method":"POST","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Y22JYlI9D4JMI4Uf_tSOCwi4vPPDDnB1FWSJbOqdW9Ruq3FH9a3xKscqCj8R"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ff5f80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Y22JYlI9D4JMI4Uf_tSOCwi4vPPDDnB1FWSJbOqdW9Ruq3FH9a3xKscqCj8R\"}"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ff5f80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"767f5975-32b9-4cf2-8fe1-372b7fdb5c67","keyName":"e2e-sub-iso-f22c20","subscription":"e2e-shared-sub-c686c8","tenant":"e2e-shared-b-ff5f80","userId":"767f5975-32b9-4cf2-8fe1-372b7fdb5c67","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/sub-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c686c8"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:17:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dcce2c6-4632-4c4f-905e-d4a1476b6546","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a49084db6f75006946ad3e7226153fc22bf78a7f0d7082bf7211b4ecc07cd377"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e244b6a82fa3b31ed51ed12872405c65e39508dd69eebe5228ab2510c076d1f3"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6383872679987149d92d42685526b2cdc204a9ca5597454d967e745216fcac50"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2cb0085f421923bf614d859c873b1e75225675cf905bedbf6916eb2f74e1992"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0094161e758d9c7cdb70d2c58e9784b090c5dcf9ed3b2187e9315a35fff1b9a7"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b0a42bd597876fb3efdb350d5c307434b15dee2983b4b3c51cb0f5d9a1897d6"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c19a770bbf945fbd404502210840c7741647ffad6d7e6b983d2548bb00e90406"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df6c4174bfb6a1ac5051b59d1c4961b774417de1b33b4136a8ce18cbfd0d1392"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6946590bddf45884e953d7928f32a9a6bdecdf6a23bd31e0675242abeea3de85"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/959e50ff5b668dc884f3ca2f95f57658f3eed4a7169910899d9de4e6ad97c432"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9061d624a702bb74fcd3d3b95a01be07f5a9ef11fae0fcb0a043524cbe75012"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cba664aeb3407d5994b2ba79c0ae941aeb0068f94af52b9a8f2d4df8c4bb135b"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/193e36fae63ecbe19c42425316d69792e8552817546dc3c18a7a6bfc61b60e17"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2de83054f5f68d63fabde4f42393b74993793ee59d705ec0ba906e31334b3e43"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7ebd64f9e7c95a91a8857bd9546a91fb84e71b549fdd05a0e71e2c8983cfcbc"} {"level":"info","ts":"2026-07-16T22:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63f1660dfd22ab7e877afb9dddaa9e4f9254e8a2f9b953951a8f86a7fbd15b59"} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43"} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43"} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43"} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43"} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"error","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21"} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"error","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"error","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7"} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7"} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"} {"level":"error","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7"} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d"} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d"} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d"} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d"} {"level":"debug","ts":"2026-07-16T22:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0"} {"level":"debug","ts":"2026-07-16T22:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0"} {"level":"debug","ts":"2026-07-16T22:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4"} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f237a2c83dbcda45ccc5ae4a0f409b6eaba57dffc6d04b63134a8f6e0bff6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f237a2c83dbcda45ccc5ae4a0f409b6eaba57dffc6d04b63134a8f6e0bff6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f237a2c83dbcda45ccc5ae4a0f409b6eaba57dffc6d04b63134a8f6e0bff6fe"} {"level":"info","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f237a2c83dbcda45ccc5ae4a0f409b6eaba57dffc6d04b63134a8f6e0bff6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f237a2c83dbcda45ccc5ae4a0f409b6eaba57dffc6d04b63134a8f6e0bff6fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541"} {"level":"info","ts":"2026-07-16T22:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f237a2c83dbcda45ccc5ae4a0f409b6eaba57dffc6d04b63134a8f6e0bff6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f237a2c83dbcda45ccc5ae4a0f409b6eaba57dffc6d04b63134a8f6e0bff6fe"} {"level":"info","ts":"2026-07-16T22:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f237a2c83dbcda45ccc5ae4a0f409b6eaba57dffc6d04b63134a8f6e0bff6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4"} {"level":"info","ts":"2026-07-16T22:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541"} {"level":"info","ts":"2026-07-16T22:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f237a2c83dbcda45ccc5ae4a0f409b6eaba57dffc6d04b63134a8f6e0bff6fe"} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29"} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29"} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"} {"level":"debug","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29"} {"level":"info","ts":"2026-07-16T22:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f237a2c83dbcda45ccc5ae4a0f409b6eaba57dffc6d04b63134a8f6e0bff6fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f237a2c83dbcda45ccc5ae4a0f409b6eaba57dffc6d04b63134a8f6e0bff6fe"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541"} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"} {"level":"error","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"} {"level":"error","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d"} {"level":"error","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"} {"level":"error","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7"} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43"} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4"} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"} {"level":"debug","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea5d43b1aaf25fb22efeaa6a3687f6b72b79c3ee3f51ce3c72c3c4e6af24a3e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156"} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0"} {"level":"info","ts":"2026-07-16T22:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea5d43b1aaf25fb22efeaa6a3687f6b72b79c3ee3f51ce3c72c3c4e6af24a3e5"} {"level":"info","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"910eeec4-5619-4228-8e54-71a5af8f9f22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56388","PortSpecifier":{"PortValue":56388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"910eeec4-5619-4228-8e54-71a5af8f9f22","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"910eeec4-5619-4228-8e54-71a5af8f9f22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56388","PortSpecifier":{"PortValue":56388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240346,"nanos":583736740},"http":{"id":"910eeec4-5619-4228-8e54-71a5af8f9f22","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"910eeec4-5619-4228-8e54-71a5af8f9f22","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"910eeec4-5619-4228-8e54-71a5af8f9f22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"910eeec4-5619-4228-8e54-71a5af8f9f22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"910eeec4-5619-4228-8e54-71a5af8f9f22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"910eeec4-5619-4228-8e54-71a5af8f9f22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"910eeec4-5619-4228-8e54-71a5af8f9f22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"910eeec4-5619-4228-8e54-71a5af8f9f22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"910eeec4-5619-4228-8e54-71a5af8f9f22","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"910eeec4-5619-4228-8e54-71a5af8f9f22","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"910eeec4-5619-4228-8e54-71a5af8f9f22","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"910eeec4-5619-4228-8e54-71a5af8f9f22","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7170255-15ed-4d81-9703-e1e449596ce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43430","PortSpecifier":{"PortValue":43430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7170255-15ed-4d81-9703-e1e449596ce2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7170255-15ed-4d81-9703-e1e449596ce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43430","PortSpecifier":{"PortValue":43430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240346,"nanos":627996663},"http":{"id":"e7170255-15ed-4d81-9703-e1e449596ce2","method":"POST","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7170255-15ed-4d81-9703-e1e449596ce2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7170255-15ed-4d81-9703-e1e449596ce2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7170255-15ed-4d81-9703-e1e449596ce2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7170255-15ed-4d81-9703-e1e449596ce2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7170255-15ed-4d81-9703-e1e449596ce2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7170255-15ed-4d81-9703-e1e449596ce2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/rate-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7170255-15ed-4d81-9703-e1e449596ce2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7170255-15ed-4d81-9703-e1e449596ce2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7170255-15ed-4d81-9703-e1e449596ce2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7170255-15ed-4d81-9703-e1e449596ce2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7170255-15ed-4d81-9703-e1e449596ce2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfa96973-ed0e-4939-991e-46ded5933470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56402","PortSpecifier":{"PortValue":56402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dfa96973-ed0e-4939-991e-46ded5933470","method":"POST","path":"/ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3/v1/completions","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfa96973-ed0e-4939-991e-46ded5933470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56402","PortSpecifier":{"PortValue":56402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240346,"nanos":671832438},"http":{"id":"dfa96973-ed0e-4939-991e-46ded5933470","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dfa96973-ed0e-4939-991e-46ded5933470","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JY2AtDl4O3VPRPt0_91PGzBPBd4g5PX7BFKmZINGgnGVZaBYFLIpYigiO3y1"} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dfa96973-ed0e-4939-991e-46ded5933470","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JY2AtDl4O3VPRPt0_91PGzBPBd4g5PX7BFKmZINGgnGVZaBYFLIpYigiO3y1\"}"} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dfa96973-ed0e-4939-991e-46ded5933470","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a3104e74-9997-408e-bdaa-a33dad0c6f2a","keyName":"e2e-rate-a-87f542","subscription":"e2e-rate-iso-a-87f542","tenant":"e2e-shared-a-5d61a3","userId":"a3104e74-9997-408e-bdaa-a33dad0c6f2a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dfa96973-ed0e-4939-991e-46ded5933470","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\",\"requestedSubscription\":\"e2e-rate-iso-a-87f542\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dfa96973-ed0e-4939-991e-46ded5933470","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d61a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-87f542","namespace":"ai-tenant-e2e-shared-a-5d61a3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dfa96973-ed0e-4939-991e-46ded5933470","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfa96973-ed0e-4939-991e-46ded5933470","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfa96973-ed0e-4939-991e-46ded5933470","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfa96973-ed0e-4939-991e-46ded5933470","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfa96973-ed0e-4939-991e-46ded5933470","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfa96973-ed0e-4939-991e-46ded5933470","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfa96973-ed0e-4939-991e-46ded5933470","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfa96973-ed0e-4939-991e-46ded5933470","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-87f542"} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfa96973-ed0e-4939-991e-46ded5933470","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a3104e74-9997-408e-bdaa-a33dad0c6f2a","keyName":"e2e-rate-a-87f542","selected_subscription":"e2e-rate-iso-a-87f542","selected_subscription_key":"ai-tenant-e2e-shared-a-5d61a3/e2e-rate-iso-a-87f542@ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d61a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-87f542","namespace":"ai-tenant-e2e-shared-a-5d61a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfa96973-ed0e-4939-991e-46ded5933470","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:19:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfa96973-ed0e-4939-991e-46ded5933470","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56406","PortSpecifier":{"PortValue":56406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94a46cd6-ef1f-4983-890a-958028bcbb35","method":"POST","path":"/ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3/v1/completions","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56406","PortSpecifier":{"PortValue":56406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240347,"nanos":731814204},"http":{"id":"94a46cd6-ef1f-4983-890a-958028bcbb35","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JY2AtDl4O3VPRPt0_91PGzBPBd4g5PX7BFKmZINGgnGVZaBYFLIpYigiO3y1"} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JY2AtDl4O3VPRPt0_91PGzBPBd4g5PX7BFKmZINGgnGVZaBYFLIpYigiO3y1\"}"} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a3104e74-9997-408e-bdaa-a33dad0c6f2a","keyName":"e2e-rate-a-87f542","subscription":"e2e-rate-iso-a-87f542","tenant":"e2e-shared-a-5d61a3","userId":"a3104e74-9997-408e-bdaa-a33dad0c6f2a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\",\"requestedSubscription\":\"e2e-rate-iso-a-87f542\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d61a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-87f542","namespace":"ai-tenant-e2e-shared-a-5d61a3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-87f542"} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a3104e74-9997-408e-bdaa-a33dad0c6f2a","keyName":"e2e-rate-a-87f542","selected_subscription":"e2e-rate-iso-a-87f542","selected_subscription_key":"ai-tenant-e2e-shared-a-5d61a3/e2e-rate-iso-a-87f542@ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d61a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-87f542","namespace":"ai-tenant-e2e-shared-a-5d61a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:19:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94a46cd6-ef1f-4983-890a-958028bcbb35","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56412","PortSpecifier":{"PortValue":56412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","method":"POST","path":"/ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3/v1/completions","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56412","PortSpecifier":{"PortValue":56412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240348,"nanos":769831329},"http":{"id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JY2AtDl4O3VPRPt0_91PGzBPBd4g5PX7BFKmZINGgnGVZaBYFLIpYigiO3y1"} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JY2AtDl4O3VPRPt0_91PGzBPBd4g5PX7BFKmZINGgnGVZaBYFLIpYigiO3y1\"}"} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a3104e74-9997-408e-bdaa-a33dad0c6f2a","keyName":"e2e-rate-a-87f542","subscription":"e2e-rate-iso-a-87f542","tenant":"e2e-shared-a-5d61a3","userId":"a3104e74-9997-408e-bdaa-a33dad0c6f2a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\",\"requestedSubscription\":\"e2e-rate-iso-a-87f542\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d61a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-87f542","namespace":"ai-tenant-e2e-shared-a-5d61a3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-87f542"} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a3104e74-9997-408e-bdaa-a33dad0c6f2a","keyName":"e2e-rate-a-87f542","selected_subscription":"e2e-rate-iso-a-87f542","selected_subscription_key":"ai-tenant-e2e-shared-a-5d61a3/e2e-rate-iso-a-87f542@ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d61a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-87f542","namespace":"ai-tenant-e2e-shared-a-5d61a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:19:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8adbac65-95a6-4886-8bec-79f9e281ce3d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fe997fe-577e-4f4e-8496-58972911f571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40526","PortSpecifier":{"PortValue":40526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fe997fe-577e-4f4e-8496-58972911f571","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fe997fe-577e-4f4e-8496-58972911f571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40526","PortSpecifier":{"PortValue":40526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240361,"nanos":632745304},"http":{"id":"2fe997fe-577e-4f4e-8496-58972911f571","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2fe997fe-577e-4f4e-8496-58972911f571","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fe997fe-577e-4f4e-8496-58972911f571","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fe997fe-577e-4f4e-8496-58972911f571","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fe997fe-577e-4f4e-8496-58972911f571","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fe997fe-577e-4f4e-8496-58972911f571","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fe997fe-577e-4f4e-8496-58972911f571","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fe997fe-577e-4f4e-8496-58972911f571","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fe997fe-577e-4f4e-8496-58972911f571","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fe997fe-577e-4f4e-8496-58972911f571","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fe997fe-577e-4f4e-8496-58972911f571","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fe997fe-577e-4f4e-8496-58972911f571","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38538","PortSpecifier":{"PortValue":38538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38538","PortSpecifier":{"PortValue":38538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240361,"nanos":674372781},"http":{"id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","method":"POST","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"]}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcfd47889287"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2f907da0-5883-427a-a8b8-b041709b91a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"89a2bb20-0fe2-4669-a2e5-499a31cabc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/rate-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79becc48-e8d0-44d4-bfe8-2cef94801af5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40540","PortSpecifier":{"PortValue":40540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e787a773-3ef3-46bc-a493-439f2c96ca68","method":"POST","path":"/ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3/v1/completions","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40540","PortSpecifier":{"PortValue":40540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240361,"nanos":712997133},"http":{"id":"e787a773-3ef3-46bc-a493-439f2c96ca68","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pdEnqInpGghzk7Dm_YC5WFPEaNhD6xp5SOA8OQXUkznAgL2Eu7uFyrrVBVl8"} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pdEnqInpGghzk7Dm_YC5WFPEaNhD6xp5SOA8OQXUkznAgL2Eu7uFyrrVBVl8\"}"} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"20b2c196-e162-4f5d-a804-24c8ab5e5a2f","keyName":"e2e-rate-a-600564","subscription":"e2e-rate-iso-a-600564","tenant":"e2e-shared-a-5d61a3","userId":"20b2c196-e162-4f5d-a804-24c8ab5e5a2f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\",\"requestedSubscription\":\"e2e-rate-iso-a-600564\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d61a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-600564","namespace":"ai-tenant-e2e-shared-a-5d61a3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-600564"} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"20b2c196-e162-4f5d-a804-24c8ab5e5a2f","keyName":"e2e-rate-a-600564","selected_subscription":"e2e-rate-iso-a-600564","selected_subscription_key":"ai-tenant-e2e-shared-a-5d61a3/e2e-rate-iso-a-600564@ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d61a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-600564","namespace":"ai-tenant-e2e-shared-a-5d61a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:19:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e787a773-3ef3-46bc-a493-439f2c96ca68","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40544","PortSpecifier":{"PortValue":40544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","method":"POST","path":"/ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3/v1/completions","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40544","PortSpecifier":{"PortValue":40544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240362,"nanos":754147283},"http":{"id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pdEnqInpGghzk7Dm_YC5WFPEaNhD6xp5SOA8OQXUkznAgL2Eu7uFyrrVBVl8"} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pdEnqInpGghzk7Dm_YC5WFPEaNhD6xp5SOA8OQXUkznAgL2Eu7uFyrrVBVl8\"}"} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"20b2c196-e162-4f5d-a804-24c8ab5e5a2f","keyName":"e2e-rate-a-600564","subscription":"e2e-rate-iso-a-600564","tenant":"e2e-shared-a-5d61a3","userId":"20b2c196-e162-4f5d-a804-24c8ab5e5a2f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\",\"requestedSubscription\":\"e2e-rate-iso-a-600564\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d61a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-600564","namespace":"ai-tenant-e2e-shared-a-5d61a3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-600564"} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"20b2c196-e162-4f5d-a804-24c8ab5e5a2f","keyName":"e2e-rate-a-600564","selected_subscription":"e2e-rate-iso-a-600564","selected_subscription_key":"ai-tenant-e2e-shared-a-5d61a3/e2e-rate-iso-a-600564@ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d61a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-600564","namespace":"ai-tenant-e2e-shared-a-5d61a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:19:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85a4ec73-163d-4b2e-adbc-2925c2cb9e8f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40548","PortSpecifier":{"PortValue":40548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"714b407f-3ed2-4b7a-b8cc-97e013138716","method":"POST","path":"/ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3/v1/completions","host":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40548","PortSpecifier":{"PortValue":40548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240363,"nanos":789905110},"http":{"id":"714b407f-3ed2-4b7a-b8cc-97e013138716","method":"POST","headers":{":authority":"e2e-shared-a-5d61a3.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pdEnqInpGghzk7Dm_YC5WFPEaNhD6xp5SOA8OQXUkznAgL2Eu7uFyrrVBVl8"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pdEnqInpGghzk7Dm_YC5WFPEaNhD6xp5SOA8OQXUkznAgL2Eu7uFyrrVBVl8\"}"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"20b2c196-e162-4f5d-a804-24c8ab5e5a2f","keyName":"e2e-rate-a-600564","subscription":"e2e-rate-iso-a-600564","tenant":"e2e-shared-a-5d61a3","userId":"20b2c196-e162-4f5d-a804-24c8ab5e5a2f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\",\"requestedSubscription\":\"e2e-rate-iso-a-600564\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d61a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d61a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-600564","namespace":"ai-tenant-e2e-shared-a-5d61a3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-600564"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"20b2c196-e162-4f5d-a804-24c8ab5e5a2f","keyName":"e2e-rate-a-600564","selected_subscription":"e2e-rate-iso-a-600564","selected_subscription_key":"ai-tenant-e2e-shared-a-5d61a3/e2e-rate-iso-a-600564@ai-tenant-e2e-shared-a-5d61a3/rate-test-model-5d61a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d61a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-600564","namespace":"ai-tenant-e2e-shared-a-5d61a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"714b407f-3ed2-4b7a-b8cc-97e013138716","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38546","PortSpecifier":{"PortValue":38546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31a8bc93-599e-4aa3-be07-b50af3319351","method":"POST","path":"/ai-tenant-e2e-shared-b-ff5f80/rate-test-model-ff5f80/v1/completions","host":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38546","PortSpecifier":{"PortValue":38546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784240363,"nanos":826994447},"http":{"id":"31a8bc93-599e-4aa3-be07-b50af3319351","method":"POST","headers":{":authority":"e2e-shared-b-ff5f80.apps.ff06f8b7-3741-408c-a78c-bcfd47889287.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ff5f80/rate-test-model-ff5f80/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Bj4lCCa1orNIal52_PPLUATXA8c39xA7oWBlBEhEGhAsXJDOYnWpxEDCs53N"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ff5f80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Bj4lCCa1orNIal52_PPLUATXA8c39xA7oWBlBEhEGhAsXJDOYnWpxEDCs53N\"}"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ff5f80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ef57ad01-726e-4440-9a0a-2b940b4bdaea","keyName":"e2e-rate-b-600564","subscription":"e2e-rate-iso-b-600564","tenant":"e2e-shared-b-ff5f80","userId":"ef57ad01-726e-4440-9a0a-2b940b4bdaea","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ff5f80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ff5f80/rate-test-model-ff5f80\",\"requestedSubscription\":\"e2e-rate-iso-b-600564\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ff5f80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ff5f80","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-600564","namespace":"ai-tenant-e2e-shared-b-ff5f80","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ff5f80/rate-test-model-ff5f80\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-600564"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ef57ad01-726e-4440-9a0a-2b940b4bdaea","keyName":"e2e-rate-b-600564","selected_subscription":"e2e-rate-iso-b-600564","selected_subscription_key":"ai-tenant-e2e-shared-b-ff5f80/e2e-rate-iso-b-600564@ai-tenant-e2e-shared-b-ff5f80/rate-test-model-ff5f80","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ff5f80","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-600564","namespace":"ai-tenant-e2e-shared-b-ff5f80","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:19:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31a8bc93-599e-4aa3-be07-b50af3319351","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:19:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5d6e3ec0254c34b7c160bbdd0135a1b810ae8764aeca04cfc179024f36add67"} {"level":"info","ts":"2026-07-16T22:19:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0409eb4c379a5200ee014c3770539f3e8d1c0e18ff11de46d4feee4a9535f981"} {"level":"info","ts":"2026-07-16T22:19:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/088957711eb29d350f9e05f66653a8c468c72b3b3b0b1ec67456d9f2fd1a60be"} {"level":"info","ts":"2026-07-16T22:19:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b970d7d0c8d8a89cf59ea9f749629e834f532f7a532840256a686e7de47bf541"} {"level":"info","ts":"2026-07-16T22:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5371203aa072f3756678677a6c6851b31e4fc19c5f1f4e0fa62c1081f1b9a9c4"} {"level":"info","ts":"2026-07-16T22:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c19e72a8c933e8aa2876e227c38bccb0918eca2f4c66c2074fd43c0ca6bd5c43"} {"level":"info","ts":"2026-07-16T22:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30dbe3599a8d3750d9cc91e8b3391555646ad876067af86a62dd84bf5fa413cd"} {"level":"info","ts":"2026-07-16T22:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17e4a1e3bf08fc32131dea884aa9388165cc2fd8f3cef2151a645b8f2416cb03"} {"level":"info","ts":"2026-07-16T22:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/264ed583322981b70722806f8af59fc58535f94c55af794576429f9689102ae0"} {"level":"info","ts":"2026-07-16T22:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48a023cef043d356d5a883f045a1ee9a201dcb4dc5c9d78014e3b7b43edeb9d7"} {"level":"info","ts":"2026-07-16T22:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d2b08ec1aa557da96478771c9e11534d2589f26bdb7bae169826a267e89e52d"} {"level":"info","ts":"2026-07-16T22:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f237a2c83dbcda45ccc5ae4a0f409b6eaba57dffc6d04b63134a8f6e0bff6fe"} {"level":"info","ts":"2026-07-16T22:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/883e1d736e0f5cad555f904de552ccd9c6ac4affd4b31c40b4da8ce7a191dc21"} {"level":"info","ts":"2026-07-16T22:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54ea2bda739143bbcff65788926e51c69742c0fcf8948ef8b77ee4fef19dc25d"} {"level":"info","ts":"2026-07-16T22:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c21276263c152220b2a9c8f1fbe44e5125cabd9e965eea2d64e83ff0ff90263e"} {"level":"info","ts":"2026-07-16T22:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c378ed97628e027ce657dc0a8b9d630ef00ee81e26d5c23ba98b9308e00e156"} {"level":"info","ts":"2026-07-16T22:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01d49522c83e8bc61e0d5cdce9143587a4f1792f2eba5687177494940cdce130"} {"level":"info","ts":"2026-07-16T22:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67560da3643fd7e772e622b42334149f363cadd3887b94a13d648e3de7b62827"} {"level":"info","ts":"2026-07-16T22:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01a47fd67547440f383de354aa72c94a53306c2ff77cebfcc4d7058d4c057d36"} {"level":"info","ts":"2026-07-16T22:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/494b14fc552e7fd7fe93bcd2b59c65f50da23419e95b34998723284d01bb473a"} {"level":"info","ts":"2026-07-16T22:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4230c52678e6feecb2509bffb52d791710379bc5fe1b91c5b034f7d660d7a77a"} {"level":"info","ts":"2026-07-16T22:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20e175d044add6bdeded1f296251eac695c0e1315f99f6fb20eee913aaf8e31c"} {"level":"info","ts":"2026-07-16T22:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea5d43b1aaf25fb22efeaa6a3687f6b72b79c3ee3f51ce3c72c3c4e6af24a3e5"} {"level":"info","ts":"2026-07-16T22:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56ddf2e9baf8baab1d2441b56d6573f2f129def3231d781e4e6443b7c2c42a29"}