--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43056","PortSpecifier":{"PortValue":43056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43056","PortSpecifier":{"PortValue":43056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668917,"nanos":400891525},"http":{"id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/auth-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc633b42-bc2d-4079-92d8-1e5730dc6b9f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41534","PortSpecifier":{"PortValue":41534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41534","PortSpecifier":{"PortValue":41534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668917,"nanos":442966943},"http":{"id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/auth-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"baf4f663-270c-4c14-bcbe-a31ee31623ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43060","PortSpecifier":{"PortValue":43060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43060","PortSpecifier":{"PortValue":43060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668917,"nanos":487017690},"http":{"id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","method":"GET","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XZwYRpn5awMNEx5a_h2yKUtPaT7HucaOFteAXI0FzW320VW7J4WHzZgndTVR"} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XZwYRpn5awMNEx5a_h2yKUtPaT7HucaOFteAXI0FzW320VW7J4WHzZgndTVR\"}"} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d250cedd-befa-40c1-ba76-a7a6162f2ec3","keyName":"e2e-auth-iso-a-a8bfb0","subscription":"e2e-auth-iso-75ff4f","tenant":"e2e-shared-a-0c5ebd","userId":"d250cedd-befa-40c1-ba76-a7a6162f2ec3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/auth-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-75ff4f"} {"level":"info","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:21:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d70f71d1-b213-47ac-966a-6f2b3ac0b99b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"debug","ts":"2026-07-21T21:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"error","ts":"2026-07-21T21:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"error","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:22:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a236fb09-c60d-4ecd-aeb5-312877724460","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48874","PortSpecifier":{"PortValue":48874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a236fb09-c60d-4ecd-aeb5-312877724460","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a236fb09-c60d-4ecd-aeb5-312877724460","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48874","PortSpecifier":{"PortValue":48874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668934,"nanos":827888657},"http":{"id":"a236fb09-c60d-4ecd-aeb5-312877724460","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a236fb09-c60d-4ecd-aeb5-312877724460","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a236fb09-c60d-4ecd-aeb5-312877724460","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a236fb09-c60d-4ecd-aeb5-312877724460","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a236fb09-c60d-4ecd-aeb5-312877724460","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a236fb09-c60d-4ecd-aeb5-312877724460","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a236fb09-c60d-4ecd-aeb5-312877724460","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/auth-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a236fb09-c60d-4ecd-aeb5-312877724460","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a236fb09-c60d-4ecd-aeb5-312877724460","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a236fb09-c60d-4ecd-aeb5-312877724460","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a236fb09-c60d-4ecd-aeb5-312877724460","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a236fb09-c60d-4ecd-aeb5-312877724460","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48216","PortSpecifier":{"PortValue":48216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48216","PortSpecifier":{"PortValue":48216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668934,"nanos":864794372},"http":{"id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/auth-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f067eaa-604c-4d82-8b7d-1d0d1038fe10","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a97790fc-ff6c-4bdc-83ab-4116731b7287","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48218","PortSpecifier":{"PortValue":48218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a97790fc-ff6c-4bdc-83ab-4116731b7287","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a97790fc-ff6c-4bdc-83ab-4116731b7287","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48218","PortSpecifier":{"PortValue":48218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668934,"nanos":904270220},"http":{"id":"a97790fc-ff6c-4bdc-83ab-4116731b7287","method":"GET","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a97790fc-ff6c-4bdc-83ab-4116731b7287","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NQQiVZyuba05tyzv_ugRho4p6hGLFfGW7apJtOhJHSJvEH3zUyHYIwVs5vK6"} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a97790fc-ff6c-4bdc-83ab-4116731b7287","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NQQiVZyuba05tyzv_ugRho4p6hGLFfGW7apJtOhJHSJvEH3zUyHYIwVs5vK6\"}"} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a97790fc-ff6c-4bdc-83ab-4116731b7287","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a97790fc-ff6c-4bdc-83ab-4116731b7287","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a97790fc-ff6c-4bdc-83ab-4116731b7287","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a97790fc-ff6c-4bdc-83ab-4116731b7287","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a97790fc-ff6c-4bdc-83ab-4116731b7287","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-21T21:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a97790fc-ff6c-4bdc-83ab-4116731b7287","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-21T21:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"debug","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45092","PortSpecifier":{"PortValue":45092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45092","PortSpecifier":{"PortValue":45092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668954,"nanos":427408635},"http":{"id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/auth-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26d8ebd-1b63-46de-81e5-d57d4d476fd4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3089365-5541-4865-aa09-8743e22af844","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43682","PortSpecifier":{"PortValue":43682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3089365-5541-4865-aa09-8743e22af844","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3089365-5541-4865-aa09-8743e22af844","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43682","PortSpecifier":{"PortValue":43682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668954,"nanos":463579499},"http":{"id":"b3089365-5541-4865-aa09-8743e22af844","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3089365-5541-4865-aa09-8743e22af844","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3089365-5541-4865-aa09-8743e22af844","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3089365-5541-4865-aa09-8743e22af844","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3089365-5541-4865-aa09-8743e22af844","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3089365-5541-4865-aa09-8743e22af844","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3089365-5541-4865-aa09-8743e22af844","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/auth-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3089365-5541-4865-aa09-8743e22af844","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3089365-5541-4865-aa09-8743e22af844","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3089365-5541-4865-aa09-8743e22af844","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3089365-5541-4865-aa09-8743e22af844","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3089365-5541-4865-aa09-8743e22af844","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f626841-bc27-4fa3-8fac-479d288b407f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45096","PortSpecifier":{"PortValue":45096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f626841-bc27-4fa3-8fac-479d288b407f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f626841-bc27-4fa3-8fac-479d288b407f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45096","PortSpecifier":{"PortValue":45096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668954,"nanos":507536369},"http":{"id":"3f626841-bc27-4fa3-8fac-479d288b407f","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f626841-bc27-4fa3-8fac-479d288b407f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f626841-bc27-4fa3-8fac-479d288b407f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f626841-bc27-4fa3-8fac-479d288b407f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f626841-bc27-4fa3-8fac-479d288b407f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f626841-bc27-4fa3-8fac-479d288b407f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f626841-bc27-4fa3-8fac-479d288b407f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/auth-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f626841-bc27-4fa3-8fac-479d288b407f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f626841-bc27-4fa3-8fac-479d288b407f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f626841-bc27-4fa3-8fac-479d288b407f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f626841-bc27-4fa3-8fac-479d288b407f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f626841-bc27-4fa3-8fac-479d288b407f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ec8c08e-31f1-4834-af71-04d87b562709","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43694","PortSpecifier":{"PortValue":43694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ec8c08e-31f1-4834-af71-04d87b562709","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ec8c08e-31f1-4834-af71-04d87b562709","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43694","PortSpecifier":{"PortValue":43694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668954,"nanos":548363963},"http":{"id":"3ec8c08e-31f1-4834-af71-04d87b562709","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ec8c08e-31f1-4834-af71-04d87b562709","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ec8c08e-31f1-4834-af71-04d87b562709","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ec8c08e-31f1-4834-af71-04d87b562709","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec8c08e-31f1-4834-af71-04d87b562709","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec8c08e-31f1-4834-af71-04d87b562709","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec8c08e-31f1-4834-af71-04d87b562709","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/auth-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ec8c08e-31f1-4834-af71-04d87b562709","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ec8c08e-31f1-4834-af71-04d87b562709","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ec8c08e-31f1-4834-af71-04d87b562709","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ec8c08e-31f1-4834-af71-04d87b562709","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ec8c08e-31f1-4834-af71-04d87b562709","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"error","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:22:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:22:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:22:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:22:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:22:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57752","PortSpecifier":{"PortValue":57752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:22:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57752","PortSpecifier":{"PortValue":57752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668973,"nanos":977626386},"http":{"id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:22:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:22:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/auth-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:22:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:22:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:22:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:22:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5448e78-c37d-4bcf-b38e-17bab6d153d6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"587d9b59-ca90-4183-a971-9e8bdea002c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35574","PortSpecifier":{"PortValue":35574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"587d9b59-ca90-4183-a971-9e8bdea002c9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"587d9b59-ca90-4183-a971-9e8bdea002c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35574","PortSpecifier":{"PortValue":35574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668974,"nanos":17484197},"http":{"id":"587d9b59-ca90-4183-a971-9e8bdea002c9","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"587d9b59-ca90-4183-a971-9e8bdea002c9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"587d9b59-ca90-4183-a971-9e8bdea002c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"587d9b59-ca90-4183-a971-9e8bdea002c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"587d9b59-ca90-4183-a971-9e8bdea002c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"587d9b59-ca90-4183-a971-9e8bdea002c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"587d9b59-ca90-4183-a971-9e8bdea002c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/auth-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"587d9b59-ca90-4183-a971-9e8bdea002c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"587d9b59-ca90-4183-a971-9e8bdea002c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"587d9b59-ca90-4183-a971-9e8bdea002c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"587d9b59-ca90-4183-a971-9e8bdea002c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"587d9b59-ca90-4183-a971-9e8bdea002c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35578","PortSpecifier":{"PortValue":35578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","method":"GET","path":"/maas-api/v1/api-keys/7b52ab9d-d8ae-4749-995b-858d1981dd7a","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35578","PortSpecifier":{"PortValue":35578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668974,"nanos":62756489},"http":{"id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","method":"GET","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7b52ab9d-d8ae-4749-995b-858d1981dd7a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7b52ab9d-d8ae-4749-995b-858d1981dd7a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/auth-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee7c843-10aa-4ce3-80c6-ba35623fcbe2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57754","PortSpecifier":{"PortValue":57754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","method":"GET","path":"/maas-api/v1/api-keys/7b52ab9d-d8ae-4749-995b-858d1981dd7a","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57754","PortSpecifier":{"PortValue":57754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668974,"nanos":96363474},"http":{"id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","method":"GET","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7b52ab9d-d8ae-4749-995b-858d1981dd7a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7b52ab9d-d8ae-4749-995b-858d1981dd7a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/auth-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:22:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbca0d88-67e6-4798-bae4-b4c3d6dab567","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"error","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"error","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"debug","ts":"2026-07-21T21:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"error","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"debug","ts":"2026-07-21T21:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"error","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81bbcda4-e11d-432b-83e1-11949d4953db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34186","PortSpecifier":{"PortValue":34186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81bbcda4-e11d-432b-83e1-11949d4953db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81bbcda4-e11d-432b-83e1-11949d4953db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34186","PortSpecifier":{"PortValue":34186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668993,"nanos":544352720},"http":{"id":"81bbcda4-e11d-432b-83e1-11949d4953db","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81bbcda4-e11d-432b-83e1-11949d4953db","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81bbcda4-e11d-432b-83e1-11949d4953db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81bbcda4-e11d-432b-83e1-11949d4953db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81bbcda4-e11d-432b-83e1-11949d4953db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81bbcda4-e11d-432b-83e1-11949d4953db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81bbcda4-e11d-432b-83e1-11949d4953db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/auth-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81bbcda4-e11d-432b-83e1-11949d4953db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81bbcda4-e11d-432b-83e1-11949d4953db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81bbcda4-e11d-432b-83e1-11949d4953db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81bbcda4-e11d-432b-83e1-11949d4953db","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81bbcda4-e11d-432b-83e1-11949d4953db","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44058","PortSpecifier":{"PortValue":44058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44058","PortSpecifier":{"PortValue":44058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668993,"nanos":582627816},"http":{"id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/auth-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6fefac7-bbe9-4b67-bd05-befb3951ffd0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34192","PortSpecifier":{"PortValue":34192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34192","PortSpecifier":{"PortValue":34192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784668993,"nanos":622430766},"http":{"id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RwV9d9hGoXIET61Q_KshhzLgQFlkBGwJjQZ0S7wSN7oXMbquaXyS0FChlWy5"} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RwV9d9hGoXIET61Q_KshhzLgQFlkBGwJjQZ0S7wSN7oXMbquaXyS0FChlWy5\"}"} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"40feca8c-412f-422c-b4ee-2eb387d525c3","keyName":"e2e-auth-iso-a-c7ab5d","subscription":"e2e-auth-iso-58a7ce","tenant":"e2e-shared-a-0c5ebd","userId":"40feca8c-412f-422c-b4ee-2eb387d525c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/auth-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-58a7ce"} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:23:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d0dfc67-0aa5-4bba-b62b-0287392920c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:23:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"} {"level":"info","ts":"2026-07-21T21:23:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3db3de53c282ba26d126563f53feba908d1b217f808ad4e9633b012cb0b1af4f"} {"level":"info","ts":"2026-07-21T21:23:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e27ac0b8949775ddbadba8e9600da276188bf02fd206325c6a22e11776123557"} {"level":"info","ts":"2026-07-21T21:23:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/846889a913f62af1bec62e17dc9edf2cdb69c683fe585eea9c914b98557dd0ae"} {"level":"info","ts":"2026-07-21T21:23:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d376c735ed7dee706b09708af85791550bcd321768565a0d183ab8cbb4f1c25"} {"level":"info","ts":"2026-07-21T21:23:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3d80a336f03f9d6a9a0cf058021e94eb2c3180cb9a409c517bc69b77aec8d5c"} {"level":"info","ts":"2026-07-21T21:23:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:23:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5568a87ddaa9b54f380aee1b8c22acf4e95b272e84f889d3f05a847fdad2e45b"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a5754653adb0e7723cf014650b42aba71a4770fc3a94b4ce09a9901e92b13ed"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9000e607b7d18a1be5b121beaa81d9e877869c795e039326b965a7e1dee3f9f"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74c3182b411c63146d584b9de054bc267f4c80fe3f847e71e8eb1a8fa89fc141"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd39cdcac025ef5c77ae5447a839d9cec3447a83474d9682c0407b20202e0fdb"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31b0d7b6b420ee610f6c732a81298f8e5001b90a818b1db1c2ab61e07d844ff7"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e78fbac5132b26299140226b71b2bf539082f5fd3caae5066a385f5f4ec0812"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/687ed4ebd627d34d558db5b5d3f4298053472ba192c51cec20532f26221df5d4"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6dd4263d796ac707292b2bb86ba88bb75645aaf77c9cc999c966503f4bbca70e"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865f5d2a6cac44795a02d0df8a958a93689a2c8966465518d4711b31ae0f7e2a"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"} {"level":"info","ts":"2026-07-21T21:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67c1fc149b37c637965104e141f29bdda34fa7df598becb513b98086090b74bd"} {"level":"debug","ts":"2026-07-21T21:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"} {"level":"debug","ts":"2026-07-21T21:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"} {"level":"debug","ts":"2026-07-21T21:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d63a123943da21573002ab52bf24e110bd7bcbf0edbfad6297dc0b646dfb4ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d63a123943da21573002ab52bf24e110bd7bcbf0edbfad6297dc0b646dfb4ac"} {"level":"info","ts":"2026-07-21T21:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d63a123943da21573002ab52bf24e110bd7bcbf0edbfad6297dc0b646dfb4ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d63a123943da21573002ab52bf24e110bd7bcbf0edbfad6297dc0b646dfb4ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d63a123943da21573002ab52bf24e110bd7bcbf0edbfad6297dc0b646dfb4ac"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d63a123943da21573002ab52bf24e110bd7bcbf0edbfad6297dc0b646dfb4ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d63a123943da21573002ab52bf24e110bd7bcbf0edbfad6297dc0b646dfb4ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d63a123943da21573002ab52bf24e110bd7bcbf0edbfad6297dc0b646dfb4ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d63a123943da21573002ab52bf24e110bd7bcbf0edbfad6297dc0b646dfb4ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2a04e1b5a668c94a2687d6da3ec85f84227ecf68066407183ecb73f3440dcaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2a04e1b5a668c94a2687d6da3ec85f84227ecf68066407183ecb73f3440dcaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d63a123943da21573002ab52bf24e110bd7bcbf0edbfad6297dc0b646dfb4ac"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2a04e1b5a668c94a2687d6da3ec85f84227ecf68066407183ecb73f3440dcaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2a04e1b5a668c94a2687d6da3ec85f84227ecf68066407183ecb73f3440dcaa"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2a04e1b5a668c94a2687d6da3ec85f84227ecf68066407183ecb73f3440dcaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2a04e1b5a668c94a2687d6da3ec85f84227ecf68066407183ecb73f3440dcaa"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2a04e1b5a668c94a2687d6da3ec85f84227ecf68066407183ecb73f3440dcaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2a04e1b5a668c94a2687d6da3ec85f84227ecf68066407183ecb73f3440dcaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2a04e1b5a668c94a2687d6da3ec85f84227ecf68066407183ecb73f3440dcaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2a04e1b5a668c94a2687d6da3ec85f84227ecf68066407183ecb73f3440dcaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2a04e1b5a668c94a2687d6da3ec85f84227ecf68066407183ecb73f3440dcaa"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4b6d7e63d11bd2731c07a64ef86ead65f0a8dcf30ff17802e5d076486fc2d67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4b6d7e63d11bd2731c07a64ef86ead65f0a8dcf30ff17802e5d076486fc2d67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4b6d7e63d11bd2731c07a64ef86ead65f0a8dcf30ff17802e5d076486fc2d67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3"} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4b6d7e63d11bd2731c07a64ef86ead65f0a8dcf30ff17802e5d076486fc2d67"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4b6d7e63d11bd2731c07a64ef86ead65f0a8dcf30ff17802e5d076486fc2d67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4b6d7e63d11bd2731c07a64ef86ead65f0a8dcf30ff17802e5d076486fc2d67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4b6d7e63d11bd2731c07a64ef86ead65f0a8dcf30ff17802e5d076486fc2d67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4b6d7e63d11bd2731c07a64ef86ead65f0a8dcf30ff17802e5d076486fc2d67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4b6d7e63d11bd2731c07a64ef86ead65f0a8dcf30ff17802e5d076486fc2d67"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4"} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd"} {"level":"error","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33f1ad4f2ef43d5f9241811daa3eb4eb9b5fa1a3debe356c1831fceca5deb4aa"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33f1ad4f2ef43d5f9241811daa3eb4eb9b5fa1a3debe356c1831fceca5deb4aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33f1ad4f2ef43d5f9241811daa3eb4eb9b5fa1a3debe356c1831fceca5deb4aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33f1ad4f2ef43d5f9241811daa3eb4eb9b5fa1a3debe356c1831fceca5deb4aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c306a4394db5717cb7b64a8a8ceaca633bc06c40cd2a117767b6b0c3b3df55e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c306a4394db5717cb7b64a8a8ceaca633bc06c40cd2a117767b6b0c3b3df55e2"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33f1ad4f2ef43d5f9241811daa3eb4eb9b5fa1a3debe356c1831fceca5deb4aa"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c306a4394db5717cb7b64a8a8ceaca633bc06c40cd2a117767b6b0c3b3df55e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33f1ad4f2ef43d5f9241811daa3eb4eb9b5fa1a3debe356c1831fceca5deb4aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c306a4394db5717cb7b64a8a8ceaca633bc06c40cd2a117767b6b0c3b3df55e2"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c306a4394db5717cb7b64a8a8ceaca633bc06c40cd2a117767b6b0c3b3df55e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c306a4394db5717cb7b64a8a8ceaca633bc06c40cd2a117767b6b0c3b3df55e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d00bf27a0720be30055834ff85c8d3c2fb2068324709a171d39a1f6ec91829"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/520e037e0b89509275616cb84df53baa9dc686455007b36ab05069451724e971"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c306a4394db5717cb7b64a8a8ceaca633bc06c40cd2a117767b6b0c3b3df55e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d00bf27a0720be30055834ff85c8d3c2fb2068324709a171d39a1f6ec91829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0d00bf27a0720be30055834ff85c8d3c2fb2068324709a171d39a1f6ec91829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c306a4394db5717cb7b64a8a8ceaca633bc06c40cd2a117767b6b0c3b3df55e2"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d00bf27a0720be30055834ff85c8d3c2fb2068324709a171d39a1f6ec91829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b45714d86c77f4d29f719282c31caa362a37afaae19612a058ee62991230ea00"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/387bce9c37cc40ae3be9f19a3f66c7d37fa7f10be37303bd972c9abf14b4dccf"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"520e037e0b89509275616cb84df53baa9dc686455007b36ab05069451724e971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["520e037e0b89509275616cb84df53baa9dc686455007b36ab05069451724e971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d00bf27a0720be30055834ff85c8d3c2fb2068324709a171d39a1f6ec91829"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"520e037e0b89509275616cb84df53baa9dc686455007b36ab05069451724e971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c306a4394db5717cb7b64a8a8ceaca633bc06c40cd2a117767b6b0c3b3df55e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b45714d86c77f4d29f719282c31caa362a37afaae19612a058ee62991230ea00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b45714d86c77f4d29f719282c31caa362a37afaae19612a058ee62991230ea00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/520e037e0b89509275616cb84df53baa9dc686455007b36ab05069451724e971"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b45714d86c77f4d29f719282c31caa362a37afaae19612a058ee62991230ea00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"387bce9c37cc40ae3be9f19a3f66c7d37fa7f10be37303bd972c9abf14b4dccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["387bce9c37cc40ae3be9f19a3f66c7d37fa7f10be37303bd972c9abf14b4dccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b45714d86c77f4d29f719282c31caa362a37afaae19612a058ee62991230ea00"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"387bce9c37cc40ae3be9f19a3f66c7d37fa7f10be37303bd972c9abf14b4dccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d00bf27a0720be30055834ff85c8d3c2fb2068324709a171d39a1f6ec91829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/387bce9c37cc40ae3be9f19a3f66c7d37fa7f10be37303bd972c9abf14b4dccf"} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"520e037e0b89509275616cb84df53baa9dc686455007b36ab05069451724e971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b45714d86c77f4d29f719282c31caa362a37afaae19612a058ee62991230ea00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"387bce9c37cc40ae3be9f19a3f66c7d37fa7f10be37303bd972c9abf14b4dccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:24:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:24:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4"} {"level":"info","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4"} {"level":"info","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:24:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:24:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4"} {"level":"error","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:24:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47850","PortSpecifier":{"PortValue":47850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47850","PortSpecifier":{"PortValue":47850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669062,"nanos":704262197},"http":{"id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/sub-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c0ca44d-bbde-4a9e-8cd1-b3e380636dc5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"212236ac-e69e-4b56-b273-275fe35da9b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52528","PortSpecifier":{"PortValue":52528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"212236ac-e69e-4b56-b273-275fe35da9b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"212236ac-e69e-4b56-b273-275fe35da9b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52528","PortSpecifier":{"PortValue":52528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669062,"nanos":743369786},"http":{"id":"212236ac-e69e-4b56-b273-275fe35da9b3","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"212236ac-e69e-4b56-b273-275fe35da9b3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"212236ac-e69e-4b56-b273-275fe35da9b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"212236ac-e69e-4b56-b273-275fe35da9b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"212236ac-e69e-4b56-b273-275fe35da9b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"212236ac-e69e-4b56-b273-275fe35da9b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"212236ac-e69e-4b56-b273-275fe35da9b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/sub-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"212236ac-e69e-4b56-b273-275fe35da9b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"212236ac-e69e-4b56-b273-275fe35da9b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"212236ac-e69e-4b56-b273-275fe35da9b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"212236ac-e69e-4b56-b273-275fe35da9b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"212236ac-e69e-4b56-b273-275fe35da9b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47858","PortSpecifier":{"PortValue":47858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47858","PortSpecifier":{"PortValue":47858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669062,"nanos":780007571},"http":{"id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","method":"GET","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HphR9IElJUsFyjgg_83BGy7BiB7QEoWD7E8beDHx2CV6fjcn5HipUuIqspRc"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HphR9IElJUsFyjgg_83BGy7BiB7QEoWD7E8beDHx2CV6fjcn5HipUuIqspRc\"}"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dbd8dda5-cff2-4ac3-97ff-380654179f9a","keyName":"e2e-sub-iso-01600e","subscription":"e2e-a-only-322d6d","tenant":"e2e-shared-a-0c5ebd","userId":"dbd8dda5-cff2-4ac3-97ff-380654179f9a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/sub-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-322d6d"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ccf94b1-a352-4c83-8d2d-84871cda9206","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52536","PortSpecifier":{"PortValue":52536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52536","PortSpecifier":{"PortValue":52536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669062,"nanos":819372438},"http":{"id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","method":"GET","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19cfRX2T9q6DgfXWc_ya8tL0NlVUkyhmL3lE2Du52kxOWhPQoUONMS2gFH499"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19cfRX2T9q6DgfXWc_ya8tL0NlVUkyhmL3lE2Du52kxOWhPQoUONMS2gFH499\"}"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"05069aba-feee-4fd0-b231-a2ad33b441ba","keyName":"e2e-sub-iso-ba91c2","subscription":"e2e-b-only-322d6d","tenant":"e2e-shared-b-80e9ec","userId":"05069aba-feee-4fd0-b231-a2ad33b441ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/sub-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-322d6d"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:24:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a343ab3-e8c4-4488-9803-c2cdcd5efca3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9db8f5e-b767-4fff-8350-4e491c074b33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33008","PortSpecifier":{"PortValue":33008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9db8f5e-b767-4fff-8350-4e491c074b33","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9db8f5e-b767-4fff-8350-4e491c074b33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33008","PortSpecifier":{"PortValue":33008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669073,"nanos":109699982},"http":{"id":"f9db8f5e-b767-4fff-8350-4e491c074b33","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f9db8f5e-b767-4fff-8350-4e491c074b33","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9db8f5e-b767-4fff-8350-4e491c074b33","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9db8f5e-b767-4fff-8350-4e491c074b33","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9db8f5e-b767-4fff-8350-4e491c074b33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9db8f5e-b767-4fff-8350-4e491c074b33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9db8f5e-b767-4fff-8350-4e491c074b33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/sub-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9db8f5e-b767-4fff-8350-4e491c074b33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9db8f5e-b767-4fff-8350-4e491c074b33","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9db8f5e-b767-4fff-8350-4e491c074b33","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9db8f5e-b767-4fff-8350-4e491c074b33","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9db8f5e-b767-4fff-8350-4e491c074b33","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42602","PortSpecifier":{"PortValue":42602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42602","PortSpecifier":{"PortValue":42602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669073,"nanos":154556288},"http":{"id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/sub-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"095ddd6f-a19f-49b4-8b6a-ab2981add667","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33020","PortSpecifier":{"PortValue":33020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33020","PortSpecifier":{"PortValue":33020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669073,"nanos":191110085},"http":{"id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Mb6uKy4zppOkak8i_Azrm77UbuZhWz4Yznpyd6aWg8QksanJCP4teAQuJqtz"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Mb6uKy4zppOkak8i_Azrm77UbuZhWz4Yznpyd6aWg8QksanJCP4teAQuJqtz\"}"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c13693f8-8eae-41ae-b7bb-06a2ef830f5b","keyName":"e2e-sub-iso-7319fc","subscription":"e2e-shared-sub-8ebaa5","tenant":"e2e-shared-a-0c5ebd","userId":"c13693f8-8eae-41ae-b7bb-06a2ef830f5b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/sub-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8ebaa5"} {"level":"info","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30f7207f-f4e5-46e2-b39a-8a658c98ba1e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42618","PortSpecifier":{"PortValue":42618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42618","PortSpecifier":{"PortValue":42618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669073,"nanos":223287436},"http":{"id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HN7jgzikWq746xMV_lVUPRbWWvt6KDY06i7LKSyqfEinsvBBi3D8RyxxPgs5"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HN7jgzikWq746xMV_lVUPRbWWvt6KDY06i7LKSyqfEinsvBBi3D8RyxxPgs5\"}"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c2e81f16-dd95-408f-a27d-270a7080a1be","keyName":"e2e-sub-iso-e7306a","subscription":"e2e-shared-sub-8ebaa5","tenant":"e2e-shared-b-80e9ec","userId":"c2e81f16-dd95-408f-a27d-270a7080a1be","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/sub-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8ebaa5"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:24:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ad92a21-7b08-4a47-a26e-176f8b47349d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d63a123943da21573002ab52bf24e110bd7bcbf0edbfad6297dc0b646dfb4ac"} {"level":"info","ts":"2026-07-21T21:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/520e037e0b89509275616cb84df53baa9dc686455007b36ab05069451724e971"} {"level":"info","ts":"2026-07-21T21:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c306a4394db5717cb7b64a8a8ceaca633bc06c40cd2a117767b6b0c3b3df55e2"} {"level":"info","ts":"2026-07-21T21:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33f1ad4f2ef43d5f9241811daa3eb4eb9b5fa1a3debe356c1831fceca5deb4aa"} {"level":"info","ts":"2026-07-21T21:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3"} {"level":"info","ts":"2026-07-21T21:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4b6d7e63d11bd2731c07a64ef86ead65f0a8dcf30ff17802e5d076486fc2d67"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b45714d86c77f4d29f719282c31caa362a37afaae19612a058ee62991230ea00"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0d00bf27a0720be30055834ff85c8d3c2fb2068324709a171d39a1f6ec91829"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2a04e1b5a668c94a2687d6da3ec85f84227ecf68066407183ecb73f3440dcaa"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/387bce9c37cc40ae3be9f19a3f66c7d37fa7f10be37303bd972c9abf14b4dccf"} {"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e"} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e"} {"level":"error","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87"} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e"} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a"} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"} {"level":"info","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48782","PortSpecifier":{"PortValue":48782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48782","PortSpecifier":{"PortValue":48782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669131,"nanos":625468278},"http":{"id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39124","PortSpecifier":{"PortValue":39124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39124","PortSpecifier":{"PortValue":39124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669131,"nanos":666727169},"http":{"id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48794","PortSpecifier":{"PortValue":48794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","method":"POST","path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48794","PortSpecifier":{"PortValue":48794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669131,"nanos":703337517},"http":{"id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Crb4NQdUqmS54cRj_yeeWCGJta7AJ7BGvo5aXSPzOCyPHE357hwbAnjFnLSm"} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Crb4NQdUqmS54cRj_yeeWCGJta7AJ7BGvo5aXSPzOCyPHE357hwbAnjFnLSm\"}"} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","keyName":"e2e-rate-a-ca320d","subscription":"e2e-rate-iso-a-ca320d","tenant":"e2e-shared-a-0c5ebd","userId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\",\"requestedSubscription\":\"e2e-rate-iso-a-ca320d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca320d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca320d"} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","keyName":"e2e-rate-a-ca320d","selected_subscription":"e2e-rate-iso-a-ca320d","selected_subscription_key":"ai-tenant-e2e-shared-a-0c5ebd/e2e-rate-iso-a-ca320d@ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca320d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f26e9d95-4723-441c-9808-56b838b185b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48800","PortSpecifier":{"PortValue":48800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f26e9d95-4723-441c-9808-56b838b185b7","method":"POST","path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f26e9d95-4723-441c-9808-56b838b185b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48800","PortSpecifier":{"PortValue":48800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669132,"nanos":754621091},"http":{"id":"f26e9d95-4723-441c-9808-56b838b185b7","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Crb4NQdUqmS54cRj_yeeWCGJta7AJ7BGvo5aXSPzOCyPHE357hwbAnjFnLSm"} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Crb4NQdUqmS54cRj_yeeWCGJta7AJ7BGvo5aXSPzOCyPHE357hwbAnjFnLSm\"}"} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","keyName":"e2e-rate-a-ca320d","subscription":"e2e-rate-iso-a-ca320d","tenant":"e2e-shared-a-0c5ebd","userId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\",\"requestedSubscription\":\"e2e-rate-iso-a-ca320d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca320d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"}} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f26e9d95-4723-441c-9808-56b838b185b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca320d"} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","keyName":"e2e-rate-a-ca320d","selected_subscription":"e2e-rate-iso-a-ca320d","selected_subscription_key":"ai-tenant-e2e-shared-a-0c5ebd/e2e-rate-iso-a-ca320d@ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca320d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f26e9d95-4723-441c-9808-56b838b185b7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f26e9d95-4723-441c-9808-56b838b185b7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49950","PortSpecifier":{"PortValue":49950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","method":"POST","path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49950","PortSpecifier":{"PortValue":49950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669133,"nanos":794971364},"http":{"id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Crb4NQdUqmS54cRj_yeeWCGJta7AJ7BGvo5aXSPzOCyPHE357hwbAnjFnLSm"} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Crb4NQdUqmS54cRj_yeeWCGJta7AJ7BGvo5aXSPzOCyPHE357hwbAnjFnLSm\"}"} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","keyName":"e2e-rate-a-ca320d","subscription":"e2e-rate-iso-a-ca320d","tenant":"e2e-shared-a-0c5ebd","userId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\",\"requestedSubscription\":\"e2e-rate-iso-a-ca320d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca320d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"}} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca320d"} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","keyName":"e2e-rate-a-ca320d","selected_subscription":"e2e-rate-iso-a-ca320d","selected_subscription_key":"ai-tenant-e2e-shared-a-0c5ebd/e2e-rate-iso-a-ca320d@ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca320d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51608","PortSpecifier":{"PortValue":51608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0aed34bb-72cd-4923-b109-9fa5d4817653","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51608","PortSpecifier":{"PortValue":51608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669146,"nanos":813582740},"http":{"id":"0aed34bb-72cd-4923-b109-9fa5d4817653","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44676","PortSpecifier":{"PortValue":44676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44676","PortSpecifier":{"PortValue":44676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669146,"nanos":852693164},"http":{"id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51616","PortSpecifier":{"PortValue":51616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","method":"POST","path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51616","PortSpecifier":{"PortValue":51616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669146,"nanos":892886889},"http":{"id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-plC2pjRcgGHxxsom_HVjfFHDk9RU02pLD5TFGGkTjAj3SQPyWgKXGhFTUp0R"} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-plC2pjRcgGHxxsom_HVjfFHDk9RU02pLD5TFGGkTjAj3SQPyWgKXGhFTUp0R\"}"} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62f119a3-0609-4264-b623-22f3c956759c","keyName":"e2e-rate-a-90242d","subscription":"e2e-rate-iso-a-90242d","tenant":"e2e-shared-a-0c5ebd","userId":"62f119a3-0609-4264-b623-22f3c956759c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\",\"requestedSubscription\":\"e2e-rate-iso-a-90242d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90242d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90242d"} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62f119a3-0609-4264-b623-22f3c956759c","keyName":"e2e-rate-a-90242d","selected_subscription":"e2e-rate-iso-a-90242d","selected_subscription_key":"ai-tenant-e2e-shared-a-0c5ebd/e2e-rate-iso-a-90242d@ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90242d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51622","PortSpecifier":{"PortValue":51622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","method":"POST","path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51622","PortSpecifier":{"PortValue":51622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669147,"nanos":958971551},"http":{"id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-plC2pjRcgGHxxsom_HVjfFHDk9RU02pLD5TFGGkTjAj3SQPyWgKXGhFTUp0R"} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-plC2pjRcgGHxxsom_HVjfFHDk9RU02pLD5TFGGkTjAj3SQPyWgKXGhFTUp0R\"}"} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62f119a3-0609-4264-b623-22f3c956759c","keyName":"e2e-rate-a-90242d","subscription":"e2e-rate-iso-a-90242d","tenant":"e2e-shared-a-0c5ebd","userId":"62f119a3-0609-4264-b623-22f3c956759c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\",\"requestedSubscription\":\"e2e-rate-iso-a-90242d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90242d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"}} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90242d"} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62f119a3-0609-4264-b623-22f3c956759c","keyName":"e2e-rate-a-90242d","selected_subscription":"e2e-rate-iso-a-90242d","selected_subscription_key":"ai-tenant-e2e-shared-a-0c5ebd/e2e-rate-iso-a-90242d@ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90242d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51636","PortSpecifier":{"PortValue":51636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","method":"POST","path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51636","PortSpecifier":{"PortValue":51636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669148,"nanos":997310024},"http":{"id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-plC2pjRcgGHxxsom_HVjfFHDk9RU02pLD5TFGGkTjAj3SQPyWgKXGhFTUp0R"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-plC2pjRcgGHxxsom_HVjfFHDk9RU02pLD5TFGGkTjAj3SQPyWgKXGhFTUp0R\"}"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62f119a3-0609-4264-b623-22f3c956759c","keyName":"e2e-rate-a-90242d","subscription":"e2e-rate-iso-a-90242d","tenant":"e2e-shared-a-0c5ebd","userId":"62f119a3-0609-4264-b623-22f3c956759c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\",\"requestedSubscription\":\"e2e-rate-iso-a-90242d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90242d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"}} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90242d"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62f119a3-0609-4264-b623-22f3c956759c","keyName":"e2e-rate-a-90242d","selected_subscription":"e2e-rate-iso-a-90242d","selected_subscription_key":"ai-tenant-e2e-shared-a-0c5ebd/e2e-rate-iso-a-90242d@ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90242d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44686","PortSpecifier":{"PortValue":44686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","method":"POST","path":"/ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec/v1/completions","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44686","PortSpecifier":{"PortValue":44686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669149,"nanos":34916730},"http":{"id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17TCxQ0VV2kdEGOiS_PFSpMVqxSAeZ8Lx3iSlrZ3mbsmrugiOOblFUhGL8X3W"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17TCxQ0VV2kdEGOiS_PFSpMVqxSAeZ8Lx3iSlrZ3mbsmrugiOOblFUhGL8X3W\"}"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"caa94eae-eb3c-4834-8064-ebac00efe254","keyName":"e2e-rate-b-90242d","subscription":"e2e-rate-iso-b-90242d","tenant":"e2e-shared-b-80e9ec","userId":"caa94eae-eb3c-4834-8064-ebac00efe254","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec\",\"requestedSubscription\":\"e2e-rate-iso-b-90242d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-80e9ec","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-90242d","namespace":"ai-tenant-e2e-shared-b-80e9ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec"}} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-90242d"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"caa94eae-eb3c-4834-8064-ebac00efe254","keyName":"e2e-rate-b-90242d","selected_subscription":"e2e-rate-iso-b-90242d","selected_subscription_key":"ai-tenant-e2e-shared-b-80e9ec/e2e-rate-iso-b-90242d@ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-80e9ec","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-90242d","namespace":"ai-tenant-e2e-shared-b-80e9ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"} {"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b"} {"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db"} {"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7"} {"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"} {"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"} {"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87"} {"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"} {"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0"} {"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc"} {"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"} {"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"} {"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e"} {"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"} {"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"} {"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b"} {"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"} {"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"} {"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e"} {"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782"} {"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"} {"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"} {"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"} {"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a"}