--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02ce253d-e2c7-463b-af4d-d7c95c35326d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02ce253d-e2c7-463b-af4d-d7c95c35326d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/auth-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"02ce253d-e2c7-463b-af4d-d7c95c35326d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02ce253d-e2c7-463b-af4d-d7c95c35326d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02ce253d-e2c7-463b-af4d-d7c95c35326d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02ce253d-e2c7-463b-af4d-d7c95c35326d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02ce253d-e2c7-463b-af4d-d7c95c35326d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35152","PortSpecifier":{"PortValue":35152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2f865fd-d499-4af8-ac98-f33f2152c914","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35152","PortSpecifier":{"PortValue":35152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686710,"nanos":296189299},"http":{"id":"b2f865fd-d499-4af8-ac98-f33f2152c914","method":"GET","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mrM7RV8HTYGhcybP_P24cBxUhTWdzFyS9guJ64FPp4VpOCGEc9Wlq2JKYmn9"} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mrM7RV8HTYGhcybP_P24cBxUhTWdzFyS9guJ64FPp4VpOCGEc9Wlq2JKYmn9\"}"} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93a9780b-bb3f-493d-a339-cf54644db2cf","keyName":"e2e-auth-iso-a-0176c3","subscription":"e2e-auth-iso-6b99e3","tenant":"e2e-shared-a-eba9c8","userId":"93a9780b-bb3f-493d-a339-cf54644db2cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/auth-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6b99e3"} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:18:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2f865fd-d499-4af8-ac98-f33f2152c914","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"info","ts":"2026-07-22T02:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"info","ts":"2026-07-22T02:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"info","ts":"2026-07-22T02:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:18:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"debug","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"debug","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"error","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"info","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54674","PortSpecifier":{"PortValue":54674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54674","PortSpecifier":{"PortValue":54674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686730,"nanos":348284727},"http":{"id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/auth-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd0a7f75-57d9-4bdd-ae15-d954fb110bbc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72023633-94f0-4d87-8704-73efcc6170e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57400","PortSpecifier":{"PortValue":57400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72023633-94f0-4d87-8704-73efcc6170e3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72023633-94f0-4d87-8704-73efcc6170e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57400","PortSpecifier":{"PortValue":57400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686730,"nanos":388430762},"http":{"id":"72023633-94f0-4d87-8704-73efcc6170e3","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72023633-94f0-4d87-8704-73efcc6170e3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72023633-94f0-4d87-8704-73efcc6170e3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72023633-94f0-4d87-8704-73efcc6170e3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72023633-94f0-4d87-8704-73efcc6170e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72023633-94f0-4d87-8704-73efcc6170e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72023633-94f0-4d87-8704-73efcc6170e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/auth-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72023633-94f0-4d87-8704-73efcc6170e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72023633-94f0-4d87-8704-73efcc6170e3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72023633-94f0-4d87-8704-73efcc6170e3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72023633-94f0-4d87-8704-73efcc6170e3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72023633-94f0-4d87-8704-73efcc6170e3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"205cd41f-726d-4f74-9b6f-88ba790434d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57406","PortSpecifier":{"PortValue":57406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"205cd41f-726d-4f74-9b6f-88ba790434d2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"205cd41f-726d-4f74-9b6f-88ba790434d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57406","PortSpecifier":{"PortValue":57406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686730,"nanos":429988115},"http":{"id":"205cd41f-726d-4f74-9b6f-88ba790434d2","method":"GET","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"205cd41f-726d-4f74-9b6f-88ba790434d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ki7SWdbecXPqSdd7_HbDmMzMwkODzClYL0gt9gzryLs4yXfygpSP3bAKDOXr"} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"205cd41f-726d-4f74-9b6f-88ba790434d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ki7SWdbecXPqSdd7_HbDmMzMwkODzClYL0gt9gzryLs4yXfygpSP3bAKDOXr\"}"} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"205cd41f-726d-4f74-9b6f-88ba790434d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"205cd41f-726d-4f74-9b6f-88ba790434d2","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"205cd41f-726d-4f74-9b6f-88ba790434d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"205cd41f-726d-4f74-9b6f-88ba790434d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"205cd41f-726d-4f74-9b6f-88ba790434d2","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-22T02:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"205cd41f-726d-4f74-9b6f-88ba790434d2","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-22T02:18:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:18:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:18:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"info","ts":"2026-07-22T02:18:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:18:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"info","ts":"2026-07-22T02:18:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:18:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:18:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"info","ts":"2026-07-22T02:18:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:18:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:18:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:18:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"error","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"error","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"error","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56036","PortSpecifier":{"PortValue":56036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56036","PortSpecifier":{"PortValue":56036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686750,"nanos":306515299},"http":{"id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/auth-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9e630c6-b0b8-47ef-befa-2d97c2860b92","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51058","PortSpecifier":{"PortValue":51058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51058","PortSpecifier":{"PortValue":51058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686750,"nanos":342689395},"http":{"id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/auth-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b481f22-ddd4-49ec-8add-7e5efbf32777","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9785a31c-a69e-4f8d-b751-cd0325635929","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56040","PortSpecifier":{"PortValue":56040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9785a31c-a69e-4f8d-b751-cd0325635929","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9785a31c-a69e-4f8d-b751-cd0325635929","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56040","PortSpecifier":{"PortValue":56040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686750,"nanos":386276672},"http":{"id":"9785a31c-a69e-4f8d-b751-cd0325635929","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9785a31c-a69e-4f8d-b751-cd0325635929","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9785a31c-a69e-4f8d-b751-cd0325635929","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9785a31c-a69e-4f8d-b751-cd0325635929","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9785a31c-a69e-4f8d-b751-cd0325635929","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9785a31c-a69e-4f8d-b751-cd0325635929","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9785a31c-a69e-4f8d-b751-cd0325635929","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/auth-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9785a31c-a69e-4f8d-b751-cd0325635929","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9785a31c-a69e-4f8d-b751-cd0325635929","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9785a31c-a69e-4f8d-b751-cd0325635929","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9785a31c-a69e-4f8d-b751-cd0325635929","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9785a31c-a69e-4f8d-b751-cd0325635929","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51064","PortSpecifier":{"PortValue":51064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51064","PortSpecifier":{"PortValue":51064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686750,"nanos":430374657},"http":{"id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/auth-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84d97b6f-71fb-47f6-a978-f44ed3f8532f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"info","ts":"2026-07-22T02:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"info","ts":"2026-07-22T02:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"error","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37680","PortSpecifier":{"PortValue":37680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37680","PortSpecifier":{"PortValue":37680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686770,"nanos":255421341},"http":{"id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/auth-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bf3d5c6-bcb5-4f66-a2a0-fcf9c7ab7c55","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39872","PortSpecifier":{"PortValue":39872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39872","PortSpecifier":{"PortValue":39872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686770,"nanos":301860801},"http":{"id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/auth-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e50bf582-c35a-4a5c-b19a-ba84cad135ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39876","PortSpecifier":{"PortValue":39876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","method":"GET","path":"/maas-api/v1/api-keys/5756b2d9-c349-413d-8c1a-04be260db058","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39876","PortSpecifier":{"PortValue":39876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686770,"nanos":342385895},"http":{"id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","method":"GET","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5756b2d9-c349-413d-8c1a-04be260db058",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5756b2d9-c349-413d-8c1a-04be260db058",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/auth-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c44ef265-a3a5-4240-822e-2dbc7f4d77c4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29517138-82c4-4059-91e0-27fcee9769bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37696","PortSpecifier":{"PortValue":37696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29517138-82c4-4059-91e0-27fcee9769bd","method":"GET","path":"/maas-api/v1/api-keys/5756b2d9-c349-413d-8c1a-04be260db058","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29517138-82c4-4059-91e0-27fcee9769bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37696","PortSpecifier":{"PortValue":37696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686770,"nanos":381813394},"http":{"id":"29517138-82c4-4059-91e0-27fcee9769bd","method":"GET","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5756b2d9-c349-413d-8c1a-04be260db058",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"29517138-82c4-4059-91e0-27fcee9769bd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29517138-82c4-4059-91e0-27fcee9769bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29517138-82c4-4059-91e0-27fcee9769bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5756b2d9-c349-413d-8c1a-04be260db058",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29517138-82c4-4059-91e0-27fcee9769bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29517138-82c4-4059-91e0-27fcee9769bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29517138-82c4-4059-91e0-27fcee9769bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/auth-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29517138-82c4-4059-91e0-27fcee9769bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29517138-82c4-4059-91e0-27fcee9769bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29517138-82c4-4059-91e0-27fcee9769bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29517138-82c4-4059-91e0-27fcee9769bd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:19:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29517138-82c4-4059-91e0-27fcee9769bd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"info","ts":"2026-07-22T02:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"info","ts":"2026-07-22T02:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"info","ts":"2026-07-22T02:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"debug","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"debug","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"error","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"error","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:19:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"info","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48606","PortSpecifier":{"PortValue":48606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48606","PortSpecifier":{"PortValue":48606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686788,"nanos":87075970},"http":{"id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/auth-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e64a91ea-0e20-463d-ae47-e70e940dfa66","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7ad2771-91f0-442d-8611-4e0b171d1250","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34208","PortSpecifier":{"PortValue":34208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7ad2771-91f0-442d-8611-4e0b171d1250","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7ad2771-91f0-442d-8611-4e0b171d1250","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34208","PortSpecifier":{"PortValue":34208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686788,"nanos":120616029},"http":{"id":"f7ad2771-91f0-442d-8611-4e0b171d1250","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7ad2771-91f0-442d-8611-4e0b171d1250","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7ad2771-91f0-442d-8611-4e0b171d1250","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7ad2771-91f0-442d-8611-4e0b171d1250","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7ad2771-91f0-442d-8611-4e0b171d1250","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7ad2771-91f0-442d-8611-4e0b171d1250","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7ad2771-91f0-442d-8611-4e0b171d1250","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/auth-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7ad2771-91f0-442d-8611-4e0b171d1250","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7ad2771-91f0-442d-8611-4e0b171d1250","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7ad2771-91f0-442d-8611-4e0b171d1250","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7ad2771-91f0-442d-8611-4e0b171d1250","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7ad2771-91f0-442d-8611-4e0b171d1250","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a124615-37ff-45af-a421-ae178f681485","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48610","PortSpecifier":{"PortValue":48610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a124615-37ff-45af-a421-ae178f681485","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a124615-37ff-45af-a421-ae178f681485","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48610","PortSpecifier":{"PortValue":48610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686788,"nanos":167917005},"http":{"id":"4a124615-37ff-45af-a421-ae178f681485","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a124615-37ff-45af-a421-ae178f681485","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SWj4wqahk386dAzg_p809hnaI7ptoBbjNxrk7MmcKC7m3nrbP7l5jf4PKr6M"} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a124615-37ff-45af-a421-ae178f681485","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SWj4wqahk386dAzg_p809hnaI7ptoBbjNxrk7MmcKC7m3nrbP7l5jf4PKr6M\"}"} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a124615-37ff-45af-a421-ae178f681485","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5109378-f204-4b5a-904c-d441436ac4a1","keyName":"e2e-auth-iso-a-7776fe","subscription":"e2e-auth-iso-1f02e8","tenant":"e2e-shared-a-eba9c8","userId":"b5109378-f204-4b5a-904c-d441436ac4a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a124615-37ff-45af-a421-ae178f681485","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a124615-37ff-45af-a421-ae178f681485","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a124615-37ff-45af-a421-ae178f681485","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a124615-37ff-45af-a421-ae178f681485","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/auth-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a124615-37ff-45af-a421-ae178f681485","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a124615-37ff-45af-a421-ae178f681485","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a124615-37ff-45af-a421-ae178f681485","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a124615-37ff-45af-a421-ae178f681485","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1f02e8"} {"level":"info","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a124615-37ff-45af-a421-ae178f681485","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:19:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a124615-37ff-45af-a421-ae178f681485","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:19:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09b5d388160e9da4202eefde16ca39c8afec38f317d939d2aad03c66daa26b8a"} {"level":"info","ts":"2026-07-22T02:19:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaf845acd2527ba5feccca670f3e77b5c27794479dbdf80b4a8eaf087f1ee9a6"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43acb49ef9f50ce408c3fcd4cb49ab9882029b3e32c413fa4dcd807c12b7d135"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e853b310d56ebde2e3cc168329bac15436a762af86d015289f5825e9e9014630"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c30a9bae9429d5d91ce5f22227262e83d1c2e3b2130a5a16c4e06e6426c23b66"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ae37228c80e51bf6ffbdc551263fed17864ad491cfa37c8f7bf6ea7e9ad2b37"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68a060b09f107917f513e735a1c3bbeb14804139000fb0067f600e8782a537cb"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b698ed7a36e89b66bd444d60035094bffc5c8dde0935dc76faaa8719b91933a5"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/318ebc6071edf4978bb644abc7da2247524f59ee084ea777a84c8b3ed26660ac"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aefa4c1f949d0b7ae26850b35c47d89525bf7ec7316313ccbe2d6246620f7eda"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ea362318818e9815667ebac7baa3d0a310a2fc5af8589de9a4d2a54bdad4bf5"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f72d970e5a3e85241963781c8e9b92c96ee6dabca3a2439ca4b842bf68c3a70"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e48dd2b15ab1f9b88b5b46a7fa1c4073fdf1cf520fef5ae2e15325d1866bcc3"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feafd531357c00bda8c31748bf8ae98ffd93197379d8b1acd80a51130f2ebdc5"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa4875d5e5be8077b92dfc1b524b251f55e13297b21a73f279a70f06336e918f"} {"level":"info","ts":"2026-07-22T02:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd3250fa427b02e16e1794d6cec00711ab3d873c566f4a6a331c463b12ddb972"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a2f9c2dcfb47fa0f5befecd52c8dd1226264c720bec3e80f28bc5b957d178e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a2f9c2dcfb47fa0f5befecd52c8dd1226264c720bec3e80f28bc5b957d178e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a2f9c2dcfb47fa0f5befecd52c8dd1226264c720bec3e80f28bc5b957d178e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a2f9c2dcfb47fa0f5befecd52c8dd1226264c720bec3e80f28bc5b957d178e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a2f9c2dcfb47fa0f5befecd52c8dd1226264c720bec3e80f28bc5b957d178e"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a2f9c2dcfb47fa0f5befecd52c8dd1226264c720bec3e80f28bc5b957d178e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a2f9c2dcfb47fa0f5befecd52c8dd1226264c720bec3e80f28bc5b957d178e"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20a2f9c2dcfb47fa0f5befecd52c8dd1226264c720bec3e80f28bc5b957d178e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20a2f9c2dcfb47fa0f5befecd52c8dd1226264c720bec3e80f28bc5b957d178e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20a2f9c2dcfb47fa0f5befecd52c8dd1226264c720bec3e80f28bc5b957d178e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20a2f9c2dcfb47fa0f5befecd52c8dd1226264c720bec3e80f28bc5b957d178e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20a2f9c2dcfb47fa0f5befecd52c8dd1226264c720bec3e80f28bc5b957d178e"} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9"} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9"} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd"} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9"} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd"} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"} {"level":"info","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b7ab484036d69ef7335e1caab7a4e6e2a2214228c5d051c9ed7e8e9560e92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b7ab484036d69ef7335e1caab7a4e6e2a2214228c5d051c9ed7e8e9560e92d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3994da20fd84f8f2c3d4e226420e440b61ace31a8dcedd3c42e149edbbe7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3994da20fd84f8f2c3d4e226420e440b61ace31a8dcedd3c42e149edbbe7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b7ab484036d69ef7335e1caab7a4e6e2a2214228c5d051c9ed7e8e9560e92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b7ab484036d69ef7335e1caab7a4e6e2a2214228c5d051c9ed7e8e9560e92d"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b7ab484036d69ef7335e1caab7a4e6e2a2214228c5d051c9ed7e8e9560e92d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e3994da20fd84f8f2c3d4e226420e440b61ace31a8dcedd3c42e149edbbe7da"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3994da20fd84f8f2c3d4e226420e440b61ace31a8dcedd3c42e149edbbe7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e3994da20fd84f8f2c3d4e226420e440b61ace31a8dcedd3c42e149edbbe7da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3994da20fd84f8f2c3d4e226420e440b61ace31a8dcedd3c42e149edbbe7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b7ab484036d69ef7335e1caab7a4e6e2a2214228c5d051c9ed7e8e9560e92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b7ab484036d69ef7335e1caab7a4e6e2a2214228c5d051c9ed7e8e9560e92d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b7ab484036d69ef7335e1caab7a4e6e2a2214228c5d051c9ed7e8e9560e92d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b7ab484036d69ef7335e1caab7a4e6e2a2214228c5d051c9ed7e8e9560e92d"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3994da20fd84f8f2c3d4e226420e440b61ace31a8dcedd3c42e149edbbe7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e3994da20fd84f8f2c3d4e226420e440b61ace31a8dcedd3c42e149edbbe7da"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5067c0eef4b29afab196407da944ab817feea8a1de5f40f176dafcf91a7eec9e"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/366794c8dd44b26c3fdbe28cc3aea8b8b0144cea7e4019445f3913fbc95ba1c0"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3660fa121564f4a030195afd58530422df927854d1569bb54bc3b6df3524c07"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b7ab484036d69ef7335e1caab7a4e6e2a2214228c5d051c9ed7e8e9560e92d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5067c0eef4b29afab196407da944ab817feea8a1de5f40f176dafcf91a7eec9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5067c0eef4b29afab196407da944ab817feea8a1de5f40f176dafcf91a7eec9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9c6a11b2babd7e843a467665b82ca05783657211808123c1915a3e83031db70"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5067c0eef4b29afab196407da944ab817feea8a1de5f40f176dafcf91a7eec9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"366794c8dd44b26c3fdbe28cc3aea8b8b0144cea7e4019445f3913fbc95ba1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["366794c8dd44b26c3fdbe28cc3aea8b8b0144cea7e4019445f3913fbc95ba1c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e41fb2bb3f47bce372193e67cf9f123d34b0a4644cafa047db19c0bbb8fb87f5"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"366794c8dd44b26c3fdbe28cc3aea8b8b0144cea7e4019445f3913fbc95ba1c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd1bf0b94b0cb4915b5ebe30a913e16148e5a019fcd257c54ee4580043671b8"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3660fa121564f4a030195afd58530422df927854d1569bb54bc3b6df3524c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3660fa121564f4a030195afd58530422df927854d1569bb54bc3b6df3524c07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a745ad4348a468d04cd994ebde51a6ac34b090cd3ac6650b0c5ceb40e5fe50"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/265d36f159db4a261fe31153d0925fdd1d317c45ff351b94271d12041ddc06c6"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3660fa121564f4a030195afd58530422df927854d1569bb54bc3b6df3524c07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9c6a11b2babd7e843a467665b82ca05783657211808123c1915a3e83031db70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9c6a11b2babd7e843a467665b82ca05783657211808123c1915a3e83031db70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5067c0eef4b29afab196407da944ab817feea8a1de5f40f176dafcf91a7eec9e"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/366794c8dd44b26c3fdbe28cc3aea8b8b0144cea7e4019445f3913fbc95ba1c0"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9c6a11b2babd7e843a467665b82ca05783657211808123c1915a3e83031db70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41fb2bb3f47bce372193e67cf9f123d34b0a4644cafa047db19c0bbb8fb87f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e41fb2bb3f47bce372193e67cf9f123d34b0a4644cafa047db19c0bbb8fb87f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3660fa121564f4a030195afd58530422df927854d1569bb54bc3b6df3524c07"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41fb2bb3f47bce372193e67cf9f123d34b0a4644cafa047db19c0bbb8fb87f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9c6a11b2babd7e843a467665b82ca05783657211808123c1915a3e83031db70"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e41fb2bb3f47bce372193e67cf9f123d34b0a4644cafa047db19c0bbb8fb87f5"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd1bf0b94b0cb4915b5ebe30a913e16148e5a019fcd257c54ee4580043671b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd1bf0b94b0cb4915b5ebe30a913e16148e5a019fcd257c54ee4580043671b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd1bf0b94b0cb4915b5ebe30a913e16148e5a019fcd257c54ee4580043671b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a745ad4348a468d04cd994ebde51a6ac34b090cd3ac6650b0c5ceb40e5fe50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70a745ad4348a468d04cd994ebde51a6ac34b090cd3ac6650b0c5ceb40e5fe50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd1bf0b94b0cb4915b5ebe30a913e16148e5a019fcd257c54ee4580043671b8"} {"level":"info","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a745ad4348a468d04cd994ebde51a6ac34b090cd3ac6650b0c5ceb40e5fe50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"265d36f159db4a261fe31153d0925fdd1d317c45ff351b94271d12041ddc06c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["265d36f159db4a261fe31153d0925fdd1d317c45ff351b94271d12041ddc06c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"265d36f159db4a261fe31153d0925fdd1d317c45ff351b94271d12041ddc06c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a745ad4348a468d04cd994ebde51a6ac34b090cd3ac6650b0c5ceb40e5fe50"} {"level":"info","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/265d36f159db4a261fe31153d0925fdd1d317c45ff351b94271d12041ddc06c6"} {"level":"info","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5067c0eef4b29afab196407da944ab817feea8a1de5f40f176dafcf91a7eec9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"366794c8dd44b26c3fdbe28cc3aea8b8b0144cea7e4019445f3913fbc95ba1c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3660fa121564f4a030195afd58530422df927854d1569bb54bc3b6df3524c07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9c6a11b2babd7e843a467665b82ca05783657211808123c1915a3e83031db70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e41fb2bb3f47bce372193e67cf9f123d34b0a4644cafa047db19c0bbb8fb87f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd1bf0b94b0cb4915b5ebe30a913e16148e5a019fcd257c54ee4580043671b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a745ad4348a468d04cd994ebde51a6ac34b090cd3ac6650b0c5ceb40e5fe50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"265d36f159db4a261fe31153d0925fdd1d317c45ff351b94271d12041ddc06c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:20:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:20:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af"} {"level":"info","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af"} {"level":"info","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af"} {"level":"error","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52176","PortSpecifier":{"PortValue":52176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52176","PortSpecifier":{"PortValue":52176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686837,"nanos":379636973},"http":{"id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/sub-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90ce42c7-6493-4125-b20e-f38a5966d6d6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57838","PortSpecifier":{"PortValue":57838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57838","PortSpecifier":{"PortValue":57838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686837,"nanos":422849763},"http":{"id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/sub-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff8081ea-9a75-465b-9d36-ad6caee92f44","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52186","PortSpecifier":{"PortValue":52186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52186","PortSpecifier":{"PortValue":52186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686837,"nanos":492787876},"http":{"id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","method":"GET","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MVGb0BZmpHQ2tFx7_wXLTSzmMzykorj5fKfwANDkw0RNi4VtxHfin32HExH"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MVGb0BZmpHQ2tFx7_wXLTSzmMzykorj5fKfwANDkw0RNi4VtxHfin32HExH\"}"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24e9a6d2-82d5-4d16-9933-f3bb8cfee45e","keyName":"e2e-sub-iso-4e0551","subscription":"e2e-a-only-13bfe7","tenant":"e2e-shared-a-eba9c8","userId":"24e9a6d2-82d5-4d16-9933-f3bb8cfee45e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/sub-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-13bfe7"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fe1df27-3c92-4b40-87c4-afc900a3cc7e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57842","PortSpecifier":{"PortValue":57842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57842","PortSpecifier":{"PortValue":57842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686837,"nanos":524879852},"http":{"id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","method":"GET","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VlYtOMSifTIBZYl3_E5eHNWUlNAhgbKJbWrgHRAcrTRvZWBNxZTEPz24FwE0"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VlYtOMSifTIBZYl3_E5eHNWUlNAhgbKJbWrgHRAcrTRvZWBNxZTEPz24FwE0\"}"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"81f93966-a7ce-4455-a82b-e74b22775e93","keyName":"e2e-sub-iso-114d4f","subscription":"e2e-b-only-13bfe7","tenant":"e2e-shared-b-c6960c","userId":"81f93966-a7ce-4455-a82b-e74b22775e93","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/sub-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-13bfe7"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:20:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b4cfef0-08f3-45b6-9d77-86d16d7d9192","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41414","PortSpecifier":{"PortValue":41414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41414","PortSpecifier":{"PortValue":41414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686856,"nanos":653811086},"http":{"id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/sub-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d822c475-45e2-4e4b-a6e0-202a07f3f82d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52012","PortSpecifier":{"PortValue":52012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52012","PortSpecifier":{"PortValue":52012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686856,"nanos":693326764},"http":{"id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/sub-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b02b11e8-dabb-4bfb-84a2-ab83f5639405","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41418","PortSpecifier":{"PortValue":41418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aca07413-d928-4a18-b8d3-baecac4d13e6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41418","PortSpecifier":{"PortValue":41418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686856,"nanos":731011480},"http":{"id":"aca07413-d928-4a18-b8d3-baecac4d13e6","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-96jdvNpflJLDCgMd_ibA5U7l9KLjUPuh7RD0C22Wm6fPuHXPWcXDJ4PzN2ZG"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-96jdvNpflJLDCgMd_ibA5U7l9KLjUPuh7RD0C22Wm6fPuHXPWcXDJ4PzN2ZG\"}"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a3acff08-d490-4779-a81d-67687bef6281","keyName":"e2e-sub-iso-dfc799","subscription":"e2e-shared-sub-f50712","tenant":"e2e-shared-a-eba9c8","userId":"a3acff08-d490-4779-a81d-67687bef6281","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/sub-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f50712"} {"level":"info","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aca07413-d928-4a18-b8d3-baecac4d13e6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9632f186-001b-455e-a607-32cda6bef30d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52028","PortSpecifier":{"PortValue":52028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9632f186-001b-455e-a607-32cda6bef30d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9632f186-001b-455e-a607-32cda6bef30d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52028","PortSpecifier":{"PortValue":52028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686856,"nanos":762609595},"http":{"id":"9632f186-001b-455e-a607-32cda6bef30d","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9632f186-001b-455e-a607-32cda6bef30d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13w0eAcgO89SOT7Ct_r64iQqc6v1xOXNRdGtFS2nWKk30ZzgEfOvtsXfqyN3B"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9632f186-001b-455e-a607-32cda6bef30d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13w0eAcgO89SOT7Ct_r64iQqc6v1xOXNRdGtFS2nWKk30ZzgEfOvtsXfqyN3B\"}"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9632f186-001b-455e-a607-32cda6bef30d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fbaa97ef-87fc-427f-b26a-1eb8577c0376","keyName":"e2e-sub-iso-ee0c09","subscription":"e2e-shared-sub-f50712","tenant":"e2e-shared-b-c6960c","userId":"fbaa97ef-87fc-427f-b26a-1eb8577c0376","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9632f186-001b-455e-a607-32cda6bef30d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9632f186-001b-455e-a607-32cda6bef30d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9632f186-001b-455e-a607-32cda6bef30d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9632f186-001b-455e-a607-32cda6bef30d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/sub-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9632f186-001b-455e-a607-32cda6bef30d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9632f186-001b-455e-a607-32cda6bef30d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f50712"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9632f186-001b-455e-a607-32cda6bef30d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9632f186-001b-455e-a607-32cda6bef30d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9632f186-001b-455e-a607-32cda6bef30d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:20:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9632f186-001b-455e-a607-32cda6bef30d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bace4b2b18d12c1be966616e7a8d6327d28e436182847265efe3466611b568cd"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1b7ab484036d69ef7335e1caab7a4e6e2a2214228c5d051c9ed7e8e9560e92d"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e3994da20fd84f8f2c3d4e226420e440b61ace31a8dcedd3c42e149edbbe7da"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/366794c8dd44b26c3fdbe28cc3aea8b8b0144cea7e4019445f3913fbc95ba1c0"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/265d36f159db4a261fe31153d0925fdd1d317c45ff351b94271d12041ddc06c6"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fd1bf0b94b0cb4915b5ebe30a913e16148e5a019fcd257c54ee4580043671b8"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70a745ad4348a468d04cd994ebde51a6ac34b090cd3ac6650b0c5ceb40e5fe50"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5067c0eef4b29afab196407da944ab817feea8a1de5f40f176dafcf91a7eec9e"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20a2f9c2dcfb47fa0f5befecd52c8dd1226264c720bec3e80f28bc5b957d178e"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b7da2b063d831110638f95ab23a4521c773771beb04c4a646b24bd65a9ba649"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c965763595702a5874d7abc3056a272592bf890b2bcb120e9c0785ab84f35af"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f891b8576615b87b1b709fe79c4dff0a00b44180272a093376064b9762061bc9"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e41fb2bb3f47bce372193e67cf9f123d34b0a4644cafa047db19c0bbb8fb87f5"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9c6a11b2babd7e843a467665b82ca05783657211808123c1915a3e83031db70"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3660fa121564f4a030195afd58530422df927854d1569bb54bc3b6df3524c07"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3038666822b45e7e4db7968843a8e764c7c284006575940e9a70dca5e30bc29"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97"} {"level":"error","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"error","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"error","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"730d502b-708b-4877-be61-849b93114212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44162","PortSpecifier":{"PortValue":44162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"730d502b-708b-4877-be61-849b93114212","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"730d502b-708b-4877-be61-849b93114212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44162","PortSpecifier":{"PortValue":44162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686933,"nanos":424275433},"http":{"id":"730d502b-708b-4877-be61-849b93114212","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"730d502b-708b-4877-be61-849b93114212","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"730d502b-708b-4877-be61-849b93114212","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"730d502b-708b-4877-be61-849b93114212","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"730d502b-708b-4877-be61-849b93114212","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54844","PortSpecifier":{"PortValue":54844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c8b4275-3cfb-4265-a823-23405a0611eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54844","PortSpecifier":{"PortValue":54844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686933,"nanos":469700154},"http":{"id":"6c8b4275-3cfb-4265-a823-23405a0611eb","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44168","PortSpecifier":{"PortValue":44168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","method":"POST","path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44168","PortSpecifier":{"PortValue":44168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686933,"nanos":520095719},"http":{"id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Rvjaiglc6d8urCBd_7fx8GQkkLQtfad04cQBQgq394CjY439tgKSV5XcW7sH"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Rvjaiglc6d8urCBd_7fx8GQkkLQtfad04cQBQgq394CjY439tgKSV5XcW7sH\"}"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eed9e6df-4435-4c16-a22d-445ef8d26964","keyName":"e2e-rate-a-a979f8","subscription":"e2e-rate-iso-a-a979f8","tenant":"e2e-shared-a-eba9c8","userId":"eed9e6df-4435-4c16-a22d-445ef8d26964","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\",\"requestedSubscription\":\"e2e-rate-iso-a-a979f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a979f8","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a979f8"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"eed9e6df-4435-4c16-a22d-445ef8d26964","keyName":"e2e-rate-a-a979f8","selected_subscription":"e2e-rate-iso-a-a979f8","selected_subscription_key":"ai-tenant-e2e-shared-a-eba9c8/e2e-rate-iso-a-a979f8@ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a979f8","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44174","PortSpecifier":{"PortValue":44174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","method":"POST","path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44174","PortSpecifier":{"PortValue":44174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686934,"nanos":582185033},"http":{"id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Rvjaiglc6d8urCBd_7fx8GQkkLQtfad04cQBQgq394CjY439tgKSV5XcW7sH"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Rvjaiglc6d8urCBd_7fx8GQkkLQtfad04cQBQgq394CjY439tgKSV5XcW7sH\"}"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eed9e6df-4435-4c16-a22d-445ef8d26964","keyName":"e2e-rate-a-a979f8","subscription":"e2e-rate-iso-a-a979f8","tenant":"e2e-shared-a-eba9c8","userId":"eed9e6df-4435-4c16-a22d-445ef8d26964","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\",\"requestedSubscription\":\"e2e-rate-iso-a-a979f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a979f8","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a979f8"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"eed9e6df-4435-4c16-a22d-445ef8d26964","keyName":"e2e-rate-a-a979f8","selected_subscription":"e2e-rate-iso-a-a979f8","selected_subscription_key":"ai-tenant-e2e-shared-a-eba9c8/e2e-rate-iso-a-a979f8@ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a979f8","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44184","PortSpecifier":{"PortValue":44184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8493b696-3f16-4b07-8a1b-256716035cd8","method":"POST","path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44184","PortSpecifier":{"PortValue":44184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686935,"nanos":619242472},"http":{"id":"8493b696-3f16-4b07-8a1b-256716035cd8","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Rvjaiglc6d8urCBd_7fx8GQkkLQtfad04cQBQgq394CjY439tgKSV5XcW7sH"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Rvjaiglc6d8urCBd_7fx8GQkkLQtfad04cQBQgq394CjY439tgKSV5XcW7sH\"}"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eed9e6df-4435-4c16-a22d-445ef8d26964","keyName":"e2e-rate-a-a979f8","subscription":"e2e-rate-iso-a-a979f8","tenant":"e2e-shared-a-eba9c8","userId":"eed9e6df-4435-4c16-a22d-445ef8d26964","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\",\"requestedSubscription\":\"e2e-rate-iso-a-a979f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a979f8","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a979f8"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"eed9e6df-4435-4c16-a22d-445ef8d26964","keyName":"e2e-rate-a-a979f8","selected_subscription":"e2e-rate-iso-a-a979f8","selected_subscription_key":"ai-tenant-e2e-shared-a-eba9c8/e2e-rate-iso-a-a979f8@ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a979f8","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54926","PortSpecifier":{"PortValue":54926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54926","PortSpecifier":{"PortValue":54926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686948,"nanos":708549724},"http":{"id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55162","PortSpecifier":{"PortValue":55162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51ab37c8-4401-4c1d-9e91-1739409771f6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55162","PortSpecifier":{"PortValue":55162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686948,"nanos":754678579},"http":{"id":"51ab37c8-4401-4c1d-9e91-1739409771f6","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","method":"POST","path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686948,"nanos":796363337},"http":{"id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LPQtnzD5yEOndV0s_4NqOYi3eb0kkPNGSfZeosff8gX9KOauNlJ3X7Ehn6TH"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LPQtnzD5yEOndV0s_4NqOYi3eb0kkPNGSfZeosff8gX9KOauNlJ3X7Ehn6TH\"}"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","keyName":"e2e-rate-a-fc731b","subscription":"e2e-rate-iso-a-fc731b","tenant":"e2e-shared-a-eba9c8","userId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\",\"requestedSubscription\":\"e2e-rate-iso-a-fc731b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fc731b","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fc731b"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","keyName":"e2e-rate-a-fc731b","selected_subscription":"e2e-rate-iso-a-fc731b","selected_subscription_key":"ai-tenant-e2e-shared-a-eba9c8/e2e-rate-iso-a-fc731b@ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fc731b","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81780e94-0a86-4330-8550-0885e37827b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54946","PortSpecifier":{"PortValue":54946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81780e94-0a86-4330-8550-0885e37827b0","method":"POST","path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81780e94-0a86-4330-8550-0885e37827b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54946","PortSpecifier":{"PortValue":54946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686949,"nanos":832425279},"http":{"id":"81780e94-0a86-4330-8550-0885e37827b0","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LPQtnzD5yEOndV0s_4NqOYi3eb0kkPNGSfZeosff8gX9KOauNlJ3X7Ehn6TH"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LPQtnzD5yEOndV0s_4NqOYi3eb0kkPNGSfZeosff8gX9KOauNlJ3X7Ehn6TH\"}"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","keyName":"e2e-rate-a-fc731b","subscription":"e2e-rate-iso-a-fc731b","tenant":"e2e-shared-a-eba9c8","userId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\",\"requestedSubscription\":\"e2e-rate-iso-a-fc731b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fc731b","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81780e94-0a86-4330-8550-0885e37827b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fc731b"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","keyName":"e2e-rate-a-fc731b","selected_subscription":"e2e-rate-iso-a-fc731b","selected_subscription_key":"ai-tenant-e2e-shared-a-eba9c8/e2e-rate-iso-a-fc731b@ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fc731b","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81780e94-0a86-4330-8550-0885e37827b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81780e94-0a86-4330-8550-0885e37827b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54954","PortSpecifier":{"PortValue":54954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","method":"POST","path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54954","PortSpecifier":{"PortValue":54954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686950,"nanos":871473706},"http":{"id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LPQtnzD5yEOndV0s_4NqOYi3eb0kkPNGSfZeosff8gX9KOauNlJ3X7Ehn6TH"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LPQtnzD5yEOndV0s_4NqOYi3eb0kkPNGSfZeosff8gX9KOauNlJ3X7Ehn6TH\"}"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","keyName":"e2e-rate-a-fc731b","subscription":"e2e-rate-iso-a-fc731b","tenant":"e2e-shared-a-eba9c8","userId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\",\"requestedSubscription\":\"e2e-rate-iso-a-fc731b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fc731b","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fc731b"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","keyName":"e2e-rate-a-fc731b","selected_subscription":"e2e-rate-iso-a-fc731b","selected_subscription_key":"ai-tenant-e2e-shared-a-eba9c8/e2e-rate-iso-a-fc731b@ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fc731b","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55170","PortSpecifier":{"PortValue":55170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","method":"POST","path":"/ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c/v1/completions","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55170","PortSpecifier":{"PortValue":55170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686950,"nanos":908250131},"http":{"id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qGtrfPguUDsBMc7a_HTLVpyRg04RxqcjO1AXvLsL0AXJ9SdWLHw9SPpuqigK"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qGtrfPguUDsBMc7a_HTLVpyRg04RxqcjO1AXvLsL0AXJ9SdWLHw9SPpuqigK\"}"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2598639b-6880-4dcb-8fde-457046992e49","keyName":"e2e-rate-b-fc731b","subscription":"e2e-rate-iso-b-fc731b","tenant":"e2e-shared-b-c6960c","userId":"2598639b-6880-4dcb-8fde-457046992e49","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c\",\"requestedSubscription\":\"e2e-rate-iso-b-fc731b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6960c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fc731b","namespace":"ai-tenant-e2e-shared-b-c6960c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c"}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-fc731b"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2598639b-6880-4dcb-8fde-457046992e49","keyName":"e2e-rate-b-fc731b","selected_subscription":"e2e-rate-iso-b-fc731b","selected_subscription_key":"ai-tenant-e2e-shared-b-c6960c/e2e-rate-iso-b-fc731b@ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6960c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fc731b","namespace":"ai-tenant-e2e-shared-b-c6960c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"}